./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 09d600be73ca435c113b9c0e8e087d96a910d62ea2126c235d6963c00b3a91c2 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-13 04:04:07,548 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 04:04:07,549 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 04:04:07,571 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 04:04:07,571 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 04:04:07,572 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 04:04:07,573 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 04:04:07,574 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 04:04:07,575 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 04:04:07,576 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 04:04:07,576 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 04:04:07,577 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 04:04:07,577 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 04:04:07,578 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 04:04:07,579 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 04:04:07,579 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 04:04:07,593 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 04:04:07,596 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 04:04:07,598 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 04:04:07,603 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 04:04:07,603 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 04:04:07,608 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 04:04:07,608 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 04:04:07,609 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 04:04:07,609 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 04:04:07,611 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 04:04:07,614 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 04:04:07,614 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 04:04:07,615 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 04:04:07,615 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 04:04:07,616 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 04:04:07,616 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 04:04:07,616 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 04:04:07,617 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 04:04:07,618 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 04:04:07,619 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 04:04:07,619 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 04:04:07,620 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 04:04:07,620 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 04:04:07,620 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 04:04:07,621 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 04:04:07,622 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 04:04:07,623 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-13 04:04:07,651 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 04:04:07,651 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 04:04:07,652 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 04:04:07,652 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 04:04:07,653 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 04:04:07,654 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 04:04:07,654 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 04:04:07,654 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-13 04:04:07,654 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-13 04:04:07,655 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-13 04:04:07,655 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-13 04:04:07,655 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-13 04:04:07,655 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-13 04:04:07,656 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 04:04:07,656 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 04:04:07,656 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-13 04:04:07,656 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 04:04:07,656 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 04:04:07,656 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 04:04:07,657 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-13 04:04:07,657 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-13 04:04:07,657 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-13 04:04:07,657 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 04:04:07,657 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 04:04:07,657 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-13 04:04:07,658 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 04:04:07,658 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-13 04:04:07,658 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 04:04:07,658 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 04:04:07,659 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 04:04:07,659 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 04:04:07,660 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-13 04:04:07,660 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 09d600be73ca435c113b9c0e8e087d96a910d62ea2126c235d6963c00b3a91c2 [2022-07-13 04:04:07,891 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 04:04:07,915 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 04:04:07,917 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 04:04:07,918 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 04:04:07,919 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 04:04:07,920 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c [2022-07-13 04:04:07,980 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/732d8d68f/6d912ef52ea3452b8a6296cd42d4519f/FLAGeb7936e48 [2022-07-13 04:04:08,399 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 04:04:08,399 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c [2022-07-13 04:04:08,413 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/732d8d68f/6d912ef52ea3452b8a6296cd42d4519f/FLAGeb7936e48 [2022-07-13 04:04:08,434 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/732d8d68f/6d912ef52ea3452b8a6296cd42d4519f [2022-07-13 04:04:08,436 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 04:04:08,438 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 04:04:08,439 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 04:04:08,439 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 04:04:08,442 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 04:04:08,442 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 04:04:08" (1/1) ... [2022-07-13 04:04:08,443 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@39fde98d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:08, skipping insertion in model container [2022-07-13 04:04:08,444 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 04:04:08" (1/1) ... [2022-07-13 04:04:08,448 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 04:04:08,512 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 04:04:08,752 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c[27470,27483] [2022-07-13 04:04:08,918 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 04:04:08,939 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 04:04:08,967 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c[27470,27483] [2022-07-13 04:04:09,014 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 04:04:09,034 INFO L208 MainTranslator]: Completed translation [2022-07-13 04:04:09,035 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09 WrapperNode [2022-07-13 04:04:09,035 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 04:04:09,036 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 04:04:09,036 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 04:04:09,036 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 04:04:09,042 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,061 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,190 INFO L137 Inliner]: procedures = 90, calls = 333, calls flagged for inlining = 186, calls inlined = 270, statements flattened = 8466 [2022-07-13 04:04:09,191 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 04:04:09,191 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 04:04:09,191 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 04:04:09,191 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 04:04:09,197 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,197 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,215 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,215 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,277 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,326 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,344 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,368 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 04:04:09,370 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 04:04:09,370 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 04:04:09,371 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 04:04:09,372 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (1/1) ... [2022-07-13 04:04:09,386 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:04:09,395 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:04:09,408 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:04:09,442 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-13 04:04:09,467 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 04:04:09,467 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 04:04:09,468 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 04:04:09,468 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 04:04:09,673 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 04:04:09,674 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 04:04:12,294 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 04:04:12,322 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 04:04:12,323 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-13 04:04:12,330 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 04:04:12 BoogieIcfgContainer [2022-07-13 04:04:12,331 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 04:04:12,332 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-13 04:04:12,332 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-13 04:04:12,335 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-13 04:04:12,336 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-13 04:04:12,336 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.07 04:04:08" (1/3) ... [2022-07-13 04:04:12,337 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7fb1edf9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.07 04:04:12, skipping insertion in model container [2022-07-13 04:04:12,338 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-13 04:04:12,338 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:04:09" (2/3) ... [2022-07-13 04:04:12,338 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7fb1edf9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.07 04:04:12, skipping insertion in model container [2022-07-13 04:04:12,338 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-13 04:04:12,338 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 04:04:12" (3/3) ... [2022-07-13 04:04:12,340 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product17.cil.c [2022-07-13 04:04:12,424 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-13 04:04:12,425 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-13 04:04:12,425 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-13 04:04:12,425 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-13 04:04:12,425 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-13 04:04:12,425 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-13 04:04:12,425 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-13 04:04:12,426 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-13 04:04:12,438 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2462 states, 2461 states have (on average 1.8687525396180416) internal successors, (4599), 2461 states have internal predecessors, (4599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:12,514 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1183 [2022-07-13 04:04:12,514 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:12,514 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:12,527 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:12,527 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:12,527 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-13 04:04:12,534 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2462 states, 2461 states have (on average 1.8687525396180416) internal successors, (4599), 2461 states have internal predecessors, (4599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:12,556 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1183 [2022-07-13 04:04:12,556 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:12,556 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:12,559 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:12,559 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:12,565 INFO L752 eck$LassoCheckResult]: Stem: 533#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 2349#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 126#L1138true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2037#L1131true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 412#L1146true main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 2066#L3215true assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1069#L3190true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2205#L2619true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1369#L3272true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 614#L3297true bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1165#L414true assume 0 == initPersonOnFloor_~floor#1; 1323#L415true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 577#L522-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 961#L2626true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1228#L2638-2true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 595#L206true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 13#L218-2true assume { :end_inline_callOnFloor } true; 1648#L558true assume { :end_inline_initPersonOnFloor } true; 1510#L2995true assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 878#L3272-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1009#L3297-1true angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 471#L414-1true assume 0 == initPersonOnFloor_~floor#1; 1984#L415-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1274#L522-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1390#L2626-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1218#L2638-5true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1584#L206-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1512#L218-5true assume { :end_inline_callOnFloor } true; 1630#L558-1true assume { :end_inline_initPersonOnFloor } true; 983#L2962true assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 200#L138true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 724#L165true stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 2029#L1999true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 2111#L2011true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 546#L2148true assume !(0 != timeShift_~tmp___9~2#1); 1146#L2239true assume !(1 == ~doorState~0); 96#L2239-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1834#L1590true assume !(1 == stopRequestedInDirection_~dir#1); 272#L1759true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1486#L1912true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1641#L2247true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 2000#L1966true assume !(1 == ~currentHeading~0); 1170#L1976true assume !(0 == ~currentFloorID~0); 717#L1976-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 262#L1982-1true assume { :end_inline_continueInDirection } true; 779#L2256-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 315#L1386true __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 2069#L2664true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2305#L2665true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1248#L1395true __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1929#L2669true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 706#L2724true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 773#L2271true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 942#L3022-2true [2022-07-13 04:04:12,567 INFO L754 eck$LassoCheckResult]: Loop: 942#L3022-2true assume !false; 1381#L3023true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 78#L3026true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1913#L1233true cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 712#L3030true assume 1 != cleanup_~tmp___0~9#1; 184#L3030-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1597#L138-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416#L165-21true anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1445#L1494true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1366#L1558true isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1447#L1571true cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 444#L3042true assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 904#L138-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 228#L165-26true stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 697#L1999-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1338#L2011-1true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1675#L2148-2true assume !(0 != timeShift_~tmp___9~2#1); 538#L2239-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1730#L2239-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2109#L1590-2true assume !(1 == stopRequestedInDirection_~dir#1); 2171#L1759-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 326#L1912-2true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1023#L2247-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 37#L1966-3true assume !(1 == ~currentHeading~0); 2100#L1976-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 689#L1976-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 738#L1982-7true assume { :end_inline_continueInDirection } true; 859#L2256-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2098#L1386-1true __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 160#L2664-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1290#L2665-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1056#L1395-5true __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 263#L2669-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1169#L2724-1true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1444#L2271-1true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 942#L3022-2true [2022-07-13 04:04:12,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:12,573 INFO L85 PathProgramCache]: Analyzing trace with hash 890086623, now seen corresponding path program 1 times [2022-07-13 04:04:12,580 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:12,581 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [400919834] [2022-07-13 04:04:12,581 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:12,582 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:12,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:12,773 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:12,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:12,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [400919834] [2022-07-13 04:04:12,775 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [400919834] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:12,775 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:12,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:12,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [886551227] [2022-07-13 04:04:12,778 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:12,781 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:12,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:12,782 INFO L85 PathProgramCache]: Analyzing trace with hash -104025897, now seen corresponding path program 1 times [2022-07-13 04:04:12,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:12,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [619293622] [2022-07-13 04:04:12,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:12,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:12,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:12,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:12,831 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:12,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [619293622] [2022-07-13 04:04:12,831 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [619293622] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:12,831 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:12,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 04:04:12,832 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [643761270] [2022-07-13 04:04:12,832 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:12,833 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:12,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:12,861 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 04:04:12,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 04:04:12,868 INFO L87 Difference]: Start difference. First operand has 2462 states, 2461 states have (on average 1.8687525396180416) internal successors, (4599), 2461 states have internal predecessors, (4599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:13,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:13,210 INFO L93 Difference]: Finished difference Result 4393 states and 8102 transitions. [2022-07-13 04:04:13,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-13 04:04:13,214 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4393 states and 8102 transitions. [2022-07-13 04:04:13,246 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2149 [2022-07-13 04:04:13,276 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4393 states to 4285 states and 7990 transitions. [2022-07-13 04:04:13,277 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4285 [2022-07-13 04:04:13,282 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4285 [2022-07-13 04:04:13,283 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4285 states and 7990 transitions. [2022-07-13 04:04:13,292 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:13,292 INFO L369 hiAutomatonCegarLoop]: Abstraction has 4285 states and 7990 transitions. [2022-07-13 04:04:13,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4285 states and 7990 transitions. [2022-07-13 04:04:13,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4285 to 2443. [2022-07-13 04:04:13,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2443 states, 2443 states have (on average 1.8706508391322145) internal successors, (4570), 2442 states have internal predecessors, (4570), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:13,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2443 states to 2443 states and 4570 transitions. [2022-07-13 04:04:13,433 INFO L392 hiAutomatonCegarLoop]: Abstraction has 2443 states and 4570 transitions. [2022-07-13 04:04:13,433 INFO L374 stractBuchiCegarLoop]: Abstraction has 2443 states and 4570 transitions. [2022-07-13 04:04:13,433 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-13 04:04:13,433 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2443 states and 4570 transitions. [2022-07-13 04:04:13,443 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1185 [2022-07-13 04:04:13,443 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:13,443 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:13,445 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:13,446 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:13,446 INFO L752 eck$LassoCheckResult]: Stem: 7940#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 7941#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 7189#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7190#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 7742#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 7743#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 8636#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 8637#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 8916#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 7888#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8059#L414 assume 0 == initPersonOnFloor_~floor#1; 8739#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7034#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8010#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 7902#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8029#L206 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6917#L218-2 assume { :end_inline_callOnFloor } true; 6918#L558 assume { :end_inline_initPersonOnFloor } true; 9004#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 8431#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 6931#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7833#L414-1 assume 0 == initPersonOnFloor_~floor#1; 7834#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7320#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8841#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 7882#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8784#L206-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7762#L218-5 assume { :end_inline_callOnFloor } true; 9005#L558-1 assume { :end_inline_initPersonOnFloor } true; 8545#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 7347#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 7348#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 8212#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 8569#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 7050#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 8594#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 8596#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 9328#L2148 assume !(0 != timeShift_~tmp___9~2#1); 8721#L2239 assume !(1 == ~doorState~0); 7125#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 7126#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 7488#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 7275#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 8987#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 9086#L1966 assume !(1 == ~currentHeading~0); 8742#L1976 assume !(0 == ~currentFloorID~0); 7602#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7471#L1982-1 assume { :end_inline_continueInDirection } true; 7472#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 7570#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 7571#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 9266#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 8820#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 8821#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 7152#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8188#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 8283#L3022-2 [2022-07-13 04:04:13,446 INFO L754 eck$LassoCheckResult]: Loop: 8283#L3022-2 assume !false; 8502#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 7085#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 7086#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 8195#L3030 assume 1 != cleanup_~tmp___0~9#1; 7315#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 7316#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 8335#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 8940#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 6937#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 8914#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 7789#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 7790#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 7156#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 7406#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 8175#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 7220#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 7221#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 8984#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 9327#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 7947#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 7948#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 9130#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 9274#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 7234#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 7588#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 6980#L1966-3 assume !(1 == ~currentHeading~0); 6981#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8162#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8163#L1982-7 assume { :end_inline_continueInDirection } true; 8233#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 8408#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 7269#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 7270#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 8618#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 7473#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 7474#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8741#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 8283#L3022-2 [2022-07-13 04:04:13,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:13,447 INFO L85 PathProgramCache]: Analyzing trace with hash -1832573218, now seen corresponding path program 1 times [2022-07-13 04:04:13,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:13,448 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [865902102] [2022-07-13 04:04:13,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:13,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:13,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:13,483 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:13,484 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:13,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [865902102] [2022-07-13 04:04:13,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [865902102] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:13,484 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:13,484 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:13,484 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [737910923] [2022-07-13 04:04:13,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:13,485 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:13,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:13,485 INFO L85 PathProgramCache]: Analyzing trace with hash 1172263178, now seen corresponding path program 1 times [2022-07-13 04:04:13,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:13,486 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [343635545] [2022-07-13 04:04:13,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:13,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:13,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:13,520 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:13,521 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:13,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [343635545] [2022-07-13 04:04:13,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [343635545] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:13,521 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:13,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:13,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [865453614] [2022-07-13 04:04:13,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:13,522 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:13,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:13,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 04:04:13,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 04:04:13,523 INFO L87 Difference]: Start difference. First operand 2443 states and 4570 transitions. cyclomatic complexity: 2128 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:15,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:15,191 INFO L93 Difference]: Finished difference Result 22481 states and 41926 transitions. [2022-07-13 04:04:15,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-07-13 04:04:15,192 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22481 states and 41926 transitions. [2022-07-13 04:04:15,342 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14810 [2022-07-13 04:04:15,439 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22481 states to 22481 states and 41926 transitions. [2022-07-13 04:04:15,439 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22481 [2022-07-13 04:04:15,468 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22481 [2022-07-13 04:04:15,468 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22481 states and 41926 transitions. [2022-07-13 04:04:15,497 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:15,498 INFO L369 hiAutomatonCegarLoop]: Abstraction has 22481 states and 41926 transitions. [2022-07-13 04:04:15,509 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22481 states and 41926 transitions. [2022-07-13 04:04:15,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22481 to 4832. [2022-07-13 04:04:15,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4832 states, 4832 states have (on average 1.8700331125827814) internal successors, (9036), 4831 states have internal predecessors, (9036), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:15,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4832 states to 4832 states and 9036 transitions. [2022-07-13 04:04:15,734 INFO L392 hiAutomatonCegarLoop]: Abstraction has 4832 states and 9036 transitions. [2022-07-13 04:04:15,734 INFO L374 stractBuchiCegarLoop]: Abstraction has 4832 states and 9036 transitions. [2022-07-13 04:04:15,734 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-13 04:04:15,734 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4832 states and 9036 transitions. [2022-07-13 04:04:15,749 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2376 [2022-07-13 04:04:15,749 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:15,749 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:15,751 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:15,751 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:15,751 INFO L752 eck$LassoCheckResult]: Stem: 32927#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 32928#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 32161#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 32162#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 32726#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 32727#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 33665#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 33666#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 33961#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 32875#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 33051#L414 assume 0 == initPersonOnFloor_~floor#1; 33770#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 32005#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 33001#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 32889#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 33021#L206 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 31888#L218-2 assume { :end_inline_callOnFloor } true; 31889#L558 assume { :end_inline_initPersonOnFloor } true; 34065#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 33443#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 31902#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 32820#L414-1 assume 0 == initPersonOnFloor_~floor#1; 32821#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 33879#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 33880#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 33818#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 33819#L206-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 32746#L218-5 assume { :end_inline_callOnFloor } true; 34158#L558-1 assume { :end_inline_initPersonOnFloor } true; 34159#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 32320#L138 assume !(0 == isFloorCalling_~floorID#1); 32322#L142 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 34641#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 34640#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 34638#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 34634#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 34633#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 34632#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 34630#L2148 assume !(0 != timeShift_~tmp___9~2#1); 34629#L2239 assume !(1 == ~doorState~0); 34628#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 34626#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 32465#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 32248#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 34048#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 34166#L1966 assume !(1 == ~currentHeading~0); 34349#L1976 assume !(0 == ~currentFloorID~0); 33199#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 33200#L1982-1 assume { :end_inline_continueInDirection } true; 34596#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 34595#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 34594#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 34592#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 34589#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 34580#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 34574#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 34572#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 34571#L3022-2 [2022-07-13 04:04:15,752 INFO L754 eck$LassoCheckResult]: Loop: 34571#L3022-2 assume !false; 34570#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 34569#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 34568#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 34567#L3030 assume 1 != cleanup_~tmp___0~9#1; 34527#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 34129#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 33992#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 33993#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 34015#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 34528#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 34524#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 33472#L138-26 assume !(0 == isFloorCalling_~floorID#1); 33473#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 35709#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 35708#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 35706#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 35702#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 35701#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 35700#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 35698#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 35697#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 35696#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 35695#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 34404#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 32207#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 35660#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 31951#L1966-3 assume !(1 == ~currentHeading~0); 31952#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 33161#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 33162#L1982-7 assume { :end_inline_continueInDirection } true; 35648#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 35647#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 35645#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 35643#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 35642#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 35636#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 35630#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 34573#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 34571#L3022-2 [2022-07-13 04:04:15,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:15,752 INFO L85 PathProgramCache]: Analyzing trace with hash 486393081, now seen corresponding path program 1 times [2022-07-13 04:04:15,753 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:15,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [131102095] [2022-07-13 04:04:15,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:15,753 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:15,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:15,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:15,807 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:15,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [131102095] [2022-07-13 04:04:15,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [131102095] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:15,807 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:15,808 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:15,808 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705592012] [2022-07-13 04:04:15,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:15,808 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:15,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:15,809 INFO L85 PathProgramCache]: Analyzing trace with hash 103439857, now seen corresponding path program 1 times [2022-07-13 04:04:15,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:15,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1232036512] [2022-07-13 04:04:15,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:15,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:15,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:15,846 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:15,846 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:15,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1232036512] [2022-07-13 04:04:15,847 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1232036512] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:15,847 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:15,847 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:15,851 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1854034788] [2022-07-13 04:04:15,851 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:15,852 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:15,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:15,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 04:04:15,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 04:04:15,854 INFO L87 Difference]: Start difference. First operand 4832 states and 9036 transitions. cyclomatic complexity: 4205 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:18,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:18,098 INFO L93 Difference]: Finished difference Result 16752 states and 31227 transitions. [2022-07-13 04:04:18,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-07-13 04:04:18,099 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16752 states and 31227 transitions. [2022-07-13 04:04:18,203 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8911 [2022-07-13 04:04:18,247 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16752 states to 16752 states and 31227 transitions. [2022-07-13 04:04:18,248 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16752 [2022-07-13 04:04:18,260 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16752 [2022-07-13 04:04:18,260 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16752 states and 31227 transitions. [2022-07-13 04:04:18,274 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:18,274 INFO L369 hiAutomatonCegarLoop]: Abstraction has 16752 states and 31227 transitions. [2022-07-13 04:04:18,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16752 states and 31227 transitions. [2022-07-13 04:04:18,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16752 to 8582. [2022-07-13 04:04:18,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8582 states, 8582 states have (on average 1.867047308319739) internal successors, (16023), 8581 states have internal predecessors, (16023), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:18,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8582 states to 8582 states and 16023 transitions. [2022-07-13 04:04:18,452 INFO L392 hiAutomatonCegarLoop]: Abstraction has 8582 states and 16023 transitions. [2022-07-13 04:04:18,452 INFO L374 stractBuchiCegarLoop]: Abstraction has 8582 states and 16023 transitions. [2022-07-13 04:04:18,453 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-13 04:04:18,453 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8582 states and 16023 transitions. [2022-07-13 04:04:18,475 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4303 [2022-07-13 04:04:18,476 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:18,476 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:18,479 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:18,479 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:18,479 INFO L752 eck$LassoCheckResult]: Stem: 54579#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 54580#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 53803#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 53804#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 54375#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 54376#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 55317#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 55318#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 55631#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 54526#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 54701#L414 assume 0 == initPersonOnFloor_~floor#1; 55428#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 53645#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 54652#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 54541#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 54671#L206 assume !(0 == callOnFloor_~floorID#1); 54672#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 54905#L218-2 assume { :end_inline_callOnFloor } true; 56252#L558 assume { :end_inline_initPersonOnFloor } true; 56251#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 56247#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 56244#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 56242#L414-1 assume 0 == initPersonOnFloor_~floor#1; 56035#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 53936#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 55640#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 54520#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 55792#L206-2 assume !(0 == callOnFloor_~floorID#1); 55793#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 55738#L218-5 assume { :end_inline_callOnFloor } true; 55739#L558-1 assume { :end_inline_initPersonOnFloor } true; 55216#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 55217#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 56207#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 56312#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 56311#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 53661#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 55273#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 55275#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 56308#L2148 assume !(0 != timeShift_~tmp___9~2#1); 55409#L2239 assume !(1 == ~doorState~0); 53736#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 53737#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 55962#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 53984#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 55719#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 55840#L1966 assume !(1 == ~currentHeading~0); 56043#L1976 assume !(0 == ~currentFloorID~0); 54230#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54093#L1982-1 assume { :end_inline_continueInDirection } true; 54094#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 54198#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 54199#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 56074#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 55521#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 55522#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 53765#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 54836#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 54934#L3022-2 [2022-07-13 04:04:18,481 INFO L754 eck$LassoCheckResult]: Loop: 54934#L3022-2 assume !false; 55170#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 53696#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 53697#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 56310#L3030 assume 1 != cleanup_~tmp___0~9#1; 56307#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 56302#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 56288#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 56279#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 56268#L1498 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 56263#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 56262#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 56261#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 56260#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 56259#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 56258#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 56257#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 53834#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 53835#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 55715#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 56309#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 54587#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 54588#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 55893#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 56086#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 53968#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 54216#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 53591#L1966-3 assume !(1 == ~currentHeading~0); 53592#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54809#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 54810#L1982-7 assume { :end_inline_continueInDirection } true; 54883#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 55065#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 53884#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 53885#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 55299#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 54095#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 54096#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 55430#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 54934#L3022-2 [2022-07-13 04:04:18,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:18,481 INFO L85 PathProgramCache]: Analyzing trace with hash -1883399384, now seen corresponding path program 1 times [2022-07-13 04:04:18,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:18,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [851066091] [2022-07-13 04:04:18,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:18,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:18,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:18,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:18,516 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:18,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [851066091] [2022-07-13 04:04:18,517 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [851066091] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:18,517 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:18,517 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:18,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1093837425] [2022-07-13 04:04:18,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:18,520 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:18,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:18,521 INFO L85 PathProgramCache]: Analyzing trace with hash -1695734066, now seen corresponding path program 1 times [2022-07-13 04:04:18,521 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:18,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1388803964] [2022-07-13 04:04:18,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:18,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:18,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:18,550 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:18,550 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:18,550 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1388803964] [2022-07-13 04:04:18,551 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1388803964] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:18,551 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:18,551 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:04:18,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [623090075] [2022-07-13 04:04:18,551 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:18,551 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:18,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:18,552 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:04:18,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:04:18,553 INFO L87 Difference]: Start difference. First operand 8582 states and 16023 transitions. cyclomatic complexity: 7442 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:18,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:18,882 INFO L93 Difference]: Finished difference Result 33116 states and 61799 transitions. [2022-07-13 04:04:18,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 04:04:18,883 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33116 states and 61799 transitions. [2022-07-13 04:04:19,075 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21777 [2022-07-13 04:04:19,173 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33116 states to 33116 states and 61799 transitions. [2022-07-13 04:04:19,173 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33116 [2022-07-13 04:04:19,203 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33116 [2022-07-13 04:04:19,203 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33116 states and 61799 transitions. [2022-07-13 04:04:19,236 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:19,237 INFO L369 hiAutomatonCegarLoop]: Abstraction has 33116 states and 61799 transitions. [2022-07-13 04:04:19,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33116 states and 61799 transitions. [2022-07-13 04:04:19,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33116 to 15475. [2022-07-13 04:04:19,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15475 states, 15475 states have (on average 1.8663004846526656) internal successors, (28881), 15474 states have internal predecessors, (28881), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:19,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15475 states to 15475 states and 28881 transitions. [2022-07-13 04:04:19,520 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15475 states and 28881 transitions. [2022-07-13 04:04:19,520 INFO L374 stractBuchiCegarLoop]: Abstraction has 15475 states and 28881 transitions. [2022-07-13 04:04:19,520 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-13 04:04:19,520 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15475 states and 28881 transitions. [2022-07-13 04:04:19,563 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8480 [2022-07-13 04:04:19,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:19,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:19,565 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:19,566 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:19,566 INFO L752 eck$LassoCheckResult]: Stem: 96300#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 96301#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 95520#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 95521#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 96091#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 96092#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 97053#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 97054#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 97376#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 96248#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 96427#L414 assume 0 == initPersonOnFloor_~floor#1; 97164#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 95364#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 96375#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 96262#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 96396#L206 assume !(0 == callOnFloor_~floorID#1); 96397#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 96639#L218-2 assume { :end_inline_callOnFloor } true; 98037#L558 assume { :end_inline_initPersonOnFloor } true; 98036#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 98032#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 98029#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 98027#L414-1 assume 0 == initPersonOnFloor_~floor#1; 97799#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 95652#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 97388#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 96243#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 97552#L206-2 assume !(0 == callOnFloor_~floorID#1); 97553#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 97493#L218-5 assume { :end_inline_callOnFloor } true; 97494#L558-1 assume { :end_inline_initPersonOnFloor } true; 96950#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 96951#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 97992#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 97991#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 97988#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 97989#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 98077#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 98076#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 98075#L2148 assume !(0 != timeShift_~tmp___9~2#1); 98074#L2239 assume !(1 == ~doorState~0); 98073#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 98071#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 98068#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 98069#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 98354#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 98355#L1966 assume !(1 == ~currentHeading~0); 98414#L1976 assume !(0 == ~currentFloorID~0); 95949#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 95811#L1982-1 assume { :end_inline_continueInDirection } true; 95812#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 95913#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 95914#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 97843#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 97937#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 109140#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 96565#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 96566#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 109133#L3022-2 [2022-07-13 04:04:19,566 INFO L754 eck$LassoCheckResult]: Loop: 109133#L3022-2 assume !false; 109132#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 109131#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 109130#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 109129#L3030 assume 1 != cleanup_~tmp___0~9#1; 109128#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 109127#L138-21 assume !(0 == isFloorCalling_~floorID#1); 97835#L142-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 96728#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 97406#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 95261#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 98276#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 98251#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 98248#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 98245#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 98230#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 98227#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 98220#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 98221#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 98213#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 98214#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 98207#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 98203#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 98204#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 98176#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 98166#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 98160#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 98162#L1966-3 assume !(1 == ~currentHeading~0); 98281#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 96537#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 96538#L1982-7 assume { :end_inline_continueInDirection } true; 109764#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 109762#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 109760#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 109759#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 109758#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 109754#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 109748#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 109134#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 109133#L3022-2 [2022-07-13 04:04:19,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:19,567 INFO L85 PathProgramCache]: Analyzing trace with hash -1883399384, now seen corresponding path program 2 times [2022-07-13 04:04:19,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:19,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1333719835] [2022-07-13 04:04:19,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:19,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:19,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:19,603 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:19,603 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:19,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1333719835] [2022-07-13 04:04:19,603 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1333719835] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:19,603 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:19,604 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:19,604 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1748318533] [2022-07-13 04:04:19,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:19,604 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:19,605 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:19,605 INFO L85 PathProgramCache]: Analyzing trace with hash 253533667, now seen corresponding path program 1 times [2022-07-13 04:04:19,605 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:19,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1859228726] [2022-07-13 04:04:19,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:19,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:19,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:19,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:19,615 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:19,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1859228726] [2022-07-13 04:04:19,615 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1859228726] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:19,616 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:19,616 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:19,616 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1527001701] [2022-07-13 04:04:19,616 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:19,616 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:19,616 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:19,617 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 04:04:19,617 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 04:04:19,617 INFO L87 Difference]: Start difference. First operand 15475 states and 28881 transitions. cyclomatic complexity: 13407 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:20,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:20,069 INFO L93 Difference]: Finished difference Result 16864 states and 31248 transitions. [2022-07-13 04:04:20,069 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 04:04:20,070 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16864 states and 31248 transitions. [2022-07-13 04:04:20,126 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9236 [2022-07-13 04:04:20,170 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16864 states to 16864 states and 31248 transitions. [2022-07-13 04:04:20,171 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16864 [2022-07-13 04:04:20,184 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16864 [2022-07-13 04:04:20,184 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16864 states and 31248 transitions. [2022-07-13 04:04:20,197 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:20,198 INFO L369 hiAutomatonCegarLoop]: Abstraction has 16864 states and 31248 transitions. [2022-07-13 04:04:20,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16864 states and 31248 transitions. [2022-07-13 04:04:20,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16864 to 15247. [2022-07-13 04:04:20,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15247 states, 15247 states have (on average 1.8631206138912573) internal successors, (28407), 15246 states have internal predecessors, (28407), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:20,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15247 states to 15247 states and 28407 transitions. [2022-07-13 04:04:20,389 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15247 states and 28407 transitions. [2022-07-13 04:04:20,389 INFO L374 stractBuchiCegarLoop]: Abstraction has 15247 states and 28407 transitions. [2022-07-13 04:04:20,389 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-13 04:04:20,390 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15247 states and 28407 transitions. [2022-07-13 04:04:20,426 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8300 [2022-07-13 04:04:20,426 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:20,426 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:20,429 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:20,429 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:20,429 INFO L752 eck$LassoCheckResult]: Stem: 128618#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 128619#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 127863#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 127864#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 128417#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 128418#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 129345#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 129346#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 129649#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 128565#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 128739#L414 assume 0 == initPersonOnFloor_~floor#1; 129454#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 127710#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 128689#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 128580#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 128709#L206 assume !(0 == callOnFloor_~floorID#1); 128710#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 128948#L218-2 assume { :end_inline_callOnFloor } true; 130266#L558 assume { :end_inline_initPersonOnFloor } true; 130265#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 130261#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 130258#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 130256#L414-1 assume 0 == initPersonOnFloor_~floor#1; 130050#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 127993#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 129658#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 128559#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 129812#L206-2 assume !(0 == callOnFloor_~floorID#1); 129813#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 129755#L218-5 assume { :end_inline_callOnFloor } true; 129756#L558-1 assume { :end_inline_initPersonOnFloor } true; 129248#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 129249#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 130222#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 130220#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 130217#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 130218#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 130392#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 130391#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 130389#L2148 assume !(0 != timeShift_~tmp___9~2#1); 130388#L2239 assume !(1 == ~doorState~0); 130387#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 130385#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 130376#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 130356#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 130345#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 130335#L1966 assume !(1 == ~currentHeading~0); 130325#L1976 assume !(0 == ~currentFloorID~0); 130314#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 130310#L1982-1 assume { :end_inline_continueInDirection } true; 130309#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 130307#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 130305#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 130304#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 130303#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 130282#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 130275#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 130273#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 130272#L3022-2 [2022-07-13 04:04:20,430 INFO L754 eck$LassoCheckResult]: Loop: 130272#L3022-2 assume !false; 130271#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 130270#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 130269#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 130215#L3030 assume 1 != cleanup_~tmp___0~9#1; 130216#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 130209#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 130210#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 130204#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 130205#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 133255#L138-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 129950#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 129951#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 127613#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 142174#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 141549#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 141550#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 142154#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 142153#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 130175#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 127893#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 127894#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 129729#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 142193#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 128625#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 128626#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 142772#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 142773#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 128025#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 142621#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 142620#L1966-3 assume !(1 == ~currentHeading~0); 142614#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 142609#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 142602#L1982-7 assume { :end_inline_continueInDirection } true; 142495#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 132571#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 132569#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 132570#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 132566#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 130293#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 130276#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 130274#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 130272#L3022-2 [2022-07-13 04:04:20,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:20,430 INFO L85 PathProgramCache]: Analyzing trace with hash -1883399384, now seen corresponding path program 3 times [2022-07-13 04:04:20,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:20,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319943860] [2022-07-13 04:04:20,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:20,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:20,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:20,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:20,452 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:20,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319943860] [2022-07-13 04:04:20,452 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1319943860] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:20,452 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:20,452 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:20,455 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1934302246] [2022-07-13 04:04:20,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:20,456 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:20,457 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:20,458 INFO L85 PathProgramCache]: Analyzing trace with hash -398723998, now seen corresponding path program 1 times [2022-07-13 04:04:20,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:20,458 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1635145338] [2022-07-13 04:04:20,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:20,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:20,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:20,481 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:20,481 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:20,481 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1635145338] [2022-07-13 04:04:20,482 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1635145338] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:20,482 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:20,482 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:04:20,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1529181425] [2022-07-13 04:04:20,482 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:20,482 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:20,483 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:20,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:04:20,483 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:04:20,483 INFO L87 Difference]: Start difference. First operand 15247 states and 28407 transitions. cyclomatic complexity: 13161 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:21,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:21,044 INFO L93 Difference]: Finished difference Result 16610 states and 30698 transitions. [2022-07-13 04:04:21,045 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 04:04:21,045 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16610 states and 30698 transitions. [2022-07-13 04:04:21,096 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9046 [2022-07-13 04:04:21,130 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16610 states to 16610 states and 30698 transitions. [2022-07-13 04:04:21,131 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16610 [2022-07-13 04:04:21,140 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16610 [2022-07-13 04:04:21,140 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16610 states and 30698 transitions. [2022-07-13 04:04:21,151 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:21,151 INFO L369 hiAutomatonCegarLoop]: Abstraction has 16610 states and 30698 transitions. [2022-07-13 04:04:21,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16610 states and 30698 transitions. [2022-07-13 04:04:21,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16610 to 15247. [2022-07-13 04:04:21,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15247 states, 15247 states have (on average 1.8536761330097724) internal successors, (28263), 15246 states have internal predecessors, (28263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:21,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15247 states to 15247 states and 28263 transitions. [2022-07-13 04:04:21,338 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15247 states and 28263 transitions. [2022-07-13 04:04:21,338 INFO L374 stractBuchiCegarLoop]: Abstraction has 15247 states and 28263 transitions. [2022-07-13 04:04:21,338 INFO L287 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-07-13 04:04:21,339 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15247 states and 28263 transitions. [2022-07-13 04:04:21,377 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8300 [2022-07-13 04:04:21,377 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:21,377 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:21,381 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:21,381 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:21,382 INFO L752 eck$LassoCheckResult]: Stem: 160498#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 160499#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 159736#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 159737#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 160295#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 160296#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 161243#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 161244#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 161551#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 160444#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 160627#L414 assume 0 == initPersonOnFloor_~floor#1; 161355#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 159584#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 160572#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 160461#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 160597#L206 assume !(0 == callOnFloor_~floorID#1); 160598#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 160834#L218-2 assume { :end_inline_callOnFloor } true; 162249#L558 assume { :end_inline_initPersonOnFloor } true; 162248#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 162244#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 162241#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 162239#L414-1 assume 0 == initPersonOnFloor_~floor#1; 161978#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 159866#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 161564#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 160438#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 161726#L206-2 assume !(0 == callOnFloor_~floorID#1); 161727#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 161661#L218-5 assume { :end_inline_callOnFloor } true; 161662#L558-1 assume { :end_inline_initPersonOnFloor } true; 161143#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 161144#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 162205#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 162204#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 162203#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 159600#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 161199#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 161201#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 162197#L2148 assume !(0 != timeShift_~tmp___9~2#1); 162198#L2239 assume !(1 == ~doorState~0); 173664#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 173661#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 173594#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 173583#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 173581#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 173582#L1966 assume !(1 == ~currentHeading~0); 173691#L1976 assume !(0 == ~currentFloorID~0); 173396#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 168682#L1982-1 assume { :end_inline_continueInDirection } true; 168680#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 168679#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 168678#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 168677#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 168674#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 168653#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 168646#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 168644#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 168643#L3022-2 [2022-07-13 04:04:21,382 INFO L754 eck$LassoCheckResult]: Loop: 168643#L3022-2 assume !false; 162275#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 162267#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 162202#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 162199#L3030 assume 1 != cleanup_~tmp___0~9#1; 162196#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 162195#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 162194#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 162191#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 162192#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 162285#L138-22 assume !(0 == isFloorCalling_~floorID#1); 162306#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 161870#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 161871#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 162280#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 162279#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 162278#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 162276#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 162273#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 162268#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 162143#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 162144#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 172328#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 172327#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 172320#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 172321#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 173102#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 173101#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 173043#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 173029#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 173024#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 173023#L1966-3 assume !(1 == ~currentHeading~0); 170704#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 170701#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 170666#L1982-7 assume { :end_inline_continueInDirection } true; 170665#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 170664#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 170661#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 170662#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 170663#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 168664#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 168647#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 168645#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 168643#L3022-2 [2022-07-13 04:04:21,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:21,382 INFO L85 PathProgramCache]: Analyzing trace with hash -1883399384, now seen corresponding path program 4 times [2022-07-13 04:04:21,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:21,383 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1157165052] [2022-07-13 04:04:21,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:21,383 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:21,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:21,409 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:21,409 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:21,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1157165052] [2022-07-13 04:04:21,410 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1157165052] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:21,410 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:21,410 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:21,410 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1869477548] [2022-07-13 04:04:21,410 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:21,410 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:21,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:21,411 INFO L85 PathProgramCache]: Analyzing trace with hash -783731834, now seen corresponding path program 1 times [2022-07-13 04:04:21,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:21,411 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [848202864] [2022-07-13 04:04:21,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:21,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:21,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:21,436 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:21,436 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:21,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [848202864] [2022-07-13 04:04:21,437 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [848202864] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:21,437 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:21,437 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:21,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1346851254] [2022-07-13 04:04:21,437 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:21,437 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:21,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:21,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:21,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:21,438 INFO L87 Difference]: Start difference. First operand 15247 states and 28263 transitions. cyclomatic complexity: 13017 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:21,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:21,602 INFO L93 Difference]: Finished difference Result 23007 states and 42444 transitions. [2022-07-13 04:04:21,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:21,603 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23007 states and 42444 transitions. [2022-07-13 04:04:21,684 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15784 [2022-07-13 04:04:21,862 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23007 states to 23007 states and 42444 transitions. [2022-07-13 04:04:21,862 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23007 [2022-07-13 04:04:21,878 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23007 [2022-07-13 04:04:21,879 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23007 states and 42444 transitions. [2022-07-13 04:04:21,892 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:21,892 INFO L369 hiAutomatonCegarLoop]: Abstraction has 23007 states and 42444 transitions. [2022-07-13 04:04:21,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23007 states and 42444 transitions. [2022-07-13 04:04:22,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23007 to 15265. [2022-07-13 04:04:22,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15265 states, 15265 states have (on average 1.8526695054045201) internal successors, (28281), 15264 states have internal predecessors, (28281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:22,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15265 states to 15265 states and 28281 transitions. [2022-07-13 04:04:22,099 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15265 states and 28281 transitions. [2022-07-13 04:04:22,099 INFO L374 stractBuchiCegarLoop]: Abstraction has 15265 states and 28281 transitions. [2022-07-13 04:04:22,100 INFO L287 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-07-13 04:04:22,100 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15265 states and 28281 transitions. [2022-07-13 04:04:22,148 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8312 [2022-07-13 04:04:22,148 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:22,149 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:22,151 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:22,151 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:22,151 INFO L752 eck$LassoCheckResult]: Stem: 198776#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 198777#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 198002#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 198003#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 198571#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 198572#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 199526#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 199527#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 199851#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 198723#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 198900#L414 assume 0 == initPersonOnFloor_~floor#1; 199638#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 197850#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 198849#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 198739#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 198869#L206 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 197732#L218-2 assume { :end_inline_callOnFloor } true; 197733#L558 assume { :end_inline_initPersonOnFloor } true; 199965#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 199296#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 197749#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 198671#L414-1 assume 0 == initPersonOnFloor_~floor#1; 198672#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 199752#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 199753#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 199690#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 199691#L206-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 198594#L218-5 assume { :end_inline_callOnFloor } true; 200065#L558-1 assume { :end_inline_initPersonOnFloor } true; 200066#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 198161#L138 assume !(0 == isFloorCalling_~floorID#1); 198163#L142 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 199069#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 199070#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 199452#L1403 assume !(0 == buttonForFloorIsPressed_~floorID#1); 199453#L1407 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 202303#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 202302#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 202301#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 202299#L2148 assume !(0 != timeShift_~tmp___9~2#1); 199618#L2239 assume !(1 == ~doorState~0); 197938#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 197939#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 198309#L1759 assume !(0 == ~currentFloorID~0); 198310#L1765 assume !(~currentFloorID~0 > 0); 199052#L1780 assume ~currentFloorID~0 > 0; 207353#L1782 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 207352#L1783 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 199734#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 200553#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 200555#L1966 assume !(1 == ~currentHeading~0); 209667#L1976 assume !(0 == ~currentFloorID~0); 199050#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 199051#L1982-1 assume { :end_inline_continueInDirection } true; 209660#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 209659#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 209658#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 209656#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 209653#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 209644#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 209638#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 209636#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 209479#L3022-2 [2022-07-13 04:04:22,151 INFO L754 eck$LassoCheckResult]: Loop: 209479#L3022-2 assume !false; 209476#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 209472#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 209469#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 209461#L3030 assume 1 != cleanup_~tmp___0~9#1; 209448#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 209445#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 199881#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 199882#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 199849#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 199850#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 198623#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 198624#L138-26 assume !(0 == isFloorCalling_~floorID#1); 204981#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 204977#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 204976#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 204975#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 204974#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 204970#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 204968#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 204967#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 204966#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 200777#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 200760#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 200756#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 200755#L1759-2 assume !(0 == ~currentFloorID~0); 199215#L1765-2 assume !(~currentFloorID~0 > 0); 198119#L1780-2 assume ~currentFloorID~0 > 0; 198121#L1782-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 200747#L1783-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 200746#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 200829#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 212611#L1966-3 assume !(1 == ~currentHeading~0); 212609#L1976-9 assume !(0 == ~currentFloorID~0); 212607#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 212603#L1982-7 assume { :end_inline_continueInDirection } true; 212602#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 212601#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 212598#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 212599#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 212600#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 212586#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 209747#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 209637#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 209479#L3022-2 [2022-07-13 04:04:22,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:22,152 INFO L85 PathProgramCache]: Analyzing trace with hash 1802524055, now seen corresponding path program 1 times [2022-07-13 04:04:22,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:22,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [346361405] [2022-07-13 04:04:22,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:22,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:22,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:22,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:22,188 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:22,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [346361405] [2022-07-13 04:04:22,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [346361405] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:22,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:22,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:22,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2061079677] [2022-07-13 04:04:22,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:22,191 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:22,191 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:22,191 INFO L85 PathProgramCache]: Analyzing trace with hash -1178820411, now seen corresponding path program 1 times [2022-07-13 04:04:22,191 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:22,191 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1870700792] [2022-07-13 04:04:22,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:22,192 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:22,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:22,241 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:22,241 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:22,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1870700792] [2022-07-13 04:04:22,242 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1870700792] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:22,242 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:22,243 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:22,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1036347730] [2022-07-13 04:04:22,243 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:22,243 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:22,243 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:22,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:22,244 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:22,244 INFO L87 Difference]: Start difference. First operand 15265 states and 28281 transitions. cyclomatic complexity: 13017 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:23,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:23,278 INFO L93 Difference]: Finished difference Result 24053 states and 44239 transitions. [2022-07-13 04:04:23,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-13 04:04:23,279 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24053 states and 44239 transitions. [2022-07-13 04:04:23,368 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13162 [2022-07-13 04:04:23,424 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24053 states to 24053 states and 44239 transitions. [2022-07-13 04:04:23,424 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24053 [2022-07-13 04:04:23,441 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24053 [2022-07-13 04:04:23,441 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24053 states and 44239 transitions. [2022-07-13 04:04:23,455 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:23,455 INFO L369 hiAutomatonCegarLoop]: Abstraction has 24053 states and 44239 transitions. [2022-07-13 04:04:23,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24053 states and 44239 transitions. [2022-07-13 04:04:23,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24053 to 22581. [2022-07-13 04:04:23,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22581 states, 22581 states have (on average 1.8422567645365573) internal successors, (41600), 22580 states have internal predecessors, (41600), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:23,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22581 states to 22581 states and 41600 transitions. [2022-07-13 04:04:23,759 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22581 states and 41600 transitions. [2022-07-13 04:04:23,759 INFO L374 stractBuchiCegarLoop]: Abstraction has 22581 states and 41600 transitions. [2022-07-13 04:04:23,759 INFO L287 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-07-13 04:04:23,759 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22581 states and 41600 transitions. [2022-07-13 04:04:23,825 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12336 [2022-07-13 04:04:23,826 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:23,826 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:23,829 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:23,830 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:23,830 INFO L752 eck$LassoCheckResult]: Stem: 238091#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 238092#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 237326#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 237327#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 237887#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 237888#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 238846#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 238847#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 239171#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 238039#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 238218#L414 assume 0 == initPersonOnFloor_~floor#1; 238964#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 237176#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 238162#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 238054#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 238187#L206 assume !(0 == callOnFloor_~floorID#1); 238188#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 238430#L218-2 assume { :end_inline_callOnFloor } true; 239930#L558 assume { :end_inline_initPersonOnFloor } true; 239929#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 239925#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 239922#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 239920#L414-1 assume 0 == initPersonOnFloor_~floor#1; 239617#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 237455#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 239184#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 238033#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 239349#L206-2 assume !(0 == callOnFloor_~floorID#1); 239350#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 239284#L218-5 assume { :end_inline_callOnFloor } true; 239285#L558-1 assume { :end_inline_initPersonOnFloor } true; 238743#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 238744#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 239886#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 239945#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 239942#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 239943#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 240086#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 240085#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 240083#L2148 assume !(0 != timeShift_~tmp___9~2#1); 240082#L2239 assume !(1 == ~doorState~0); 240081#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 240079#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 240080#L1759 assume !(0 == ~currentFloorID~0); 237628#L1765 assume !(~currentFloorID~0 > 0); 239960#L1780 assume ~currentFloorID~0 > 0; 240517#L1782 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 240515#L1783 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 240516#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 258230#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 258225#L1966 assume !(1 == ~currentHeading~0); 238969#L1976 assume !(0 == ~currentFloorID~0); 237745#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 249412#L1982-1 assume { :end_inline_continueInDirection } true; 249411#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 249410#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 249217#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 249216#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 249215#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 249184#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 249175#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 249172#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 249170#L3022-2 [2022-07-13 04:04:23,830 INFO L754 eck$LassoCheckResult]: Loop: 249170#L3022-2 assume !false; 249168#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 249166#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 249164#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 238364#L3030 assume 1 != cleanup_~tmp___0~9#1; 238365#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 254484#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 254483#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 254482#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 238335#L1498 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 238336#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 239169#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 237938#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 237939#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 237539#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 237540#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 257952#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 237548#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 237357#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 237358#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 257949#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 257950#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 258198#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 242491#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 242492#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 258882#L1759-2 assume !(0 == ~currentFloorID~0); 242621#L1765-2 assume !(~currentFloorID~0 > 0); 242611#L1780-2 assume ~currentFloorID~0 > 0; 242609#L1782-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 237369#L1783-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 237370#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 259240#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 258897#L1966-3 assume !(1 == ~currentHeading~0); 258825#L1976-9 assume !(0 == ~currentFloorID~0); 249242#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 249238#L1982-7 assume { :end_inline_continueInDirection } true; 249230#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 249229#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 249226#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 249227#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 249228#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 249195#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 249176#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 249173#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 249170#L3022-2 [2022-07-13 04:04:23,831 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:23,831 INFO L85 PathProgramCache]: Analyzing trace with hash -937073135, now seen corresponding path program 1 times [2022-07-13 04:04:23,831 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:23,831 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [800230986] [2022-07-13 04:04:23,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:23,832 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:23,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:23,855 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:23,856 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:23,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [800230986] [2022-07-13 04:04:23,856 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [800230986] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:23,856 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:23,856 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:23,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [781209130] [2022-07-13 04:04:23,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:23,857 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:23,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:23,858 INFO L85 PathProgramCache]: Analyzing trace with hash -1869227512, now seen corresponding path program 1 times [2022-07-13 04:04:23,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:23,858 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1468574096] [2022-07-13 04:04:23,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:23,858 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:23,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:23,889 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:23,889 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:23,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1468574096] [2022-07-13 04:04:23,890 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1468574096] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:23,890 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:23,890 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:04:23,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1140313836] [2022-07-13 04:04:23,890 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:23,890 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:23,890 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:23,891 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:04:23,891 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:04:23,891 INFO L87 Difference]: Start difference. First operand 22581 states and 41600 transitions. cyclomatic complexity: 19020 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:24,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:24,880 INFO L93 Difference]: Finished difference Result 28503 states and 52462 transitions. [2022-07-13 04:04:24,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 04:04:24,881 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28503 states and 52462 transitions. [2022-07-13 04:04:24,991 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23735 [2022-07-13 04:04:25,078 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28503 states to 28503 states and 52462 transitions. [2022-07-13 04:04:25,079 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28503 [2022-07-13 04:04:25,099 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28503 [2022-07-13 04:04:25,100 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28503 states and 52462 transitions. [2022-07-13 04:04:25,117 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:25,118 INFO L369 hiAutomatonCegarLoop]: Abstraction has 28503 states and 52462 transitions. [2022-07-13 04:04:25,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28503 states and 52462 transitions. [2022-07-13 04:04:25,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28503 to 15631. [2022-07-13 04:04:25,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15631 states, 15631 states have (on average 1.8344315782739429) internal successors, (28674), 15630 states have internal predecessors, (28674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:25,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15631 states to 15631 states and 28674 transitions. [2022-07-13 04:04:25,321 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15631 states and 28674 transitions. [2022-07-13 04:04:25,321 INFO L374 stractBuchiCegarLoop]: Abstraction has 15631 states and 28674 transitions. [2022-07-13 04:04:25,322 INFO L287 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-07-13 04:04:25,322 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15631 states and 28674 transitions. [2022-07-13 04:04:25,361 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12380 [2022-07-13 04:04:25,361 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:25,361 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:25,362 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:25,363 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:25,363 INFO L752 eck$LassoCheckResult]: Stem: 289128#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 289129#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 288419#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 288420#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 288936#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 288937#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 289811#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 289812#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 290098#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 289078#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 289251#L414 assume 0 == initPersonOnFloor_~floor#1; 289913#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 288280#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 289198#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 289094#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 289219#L206 assume !(0 == callOnFloor_~floorID#1); 289220#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 289438#L218-2 assume { :end_inline_callOnFloor } true; 290645#L558 assume { :end_inline_initPersonOnFloor } true; 290644#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 290638#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 290635#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 290633#L414-1 assume 0 == initPersonOnFloor_~floor#1; 290605#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 290601#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 290599#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 290595#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 290594#L206-2 assume !(0 == callOnFloor_~floorID#1); 290593#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 290589#L218-5 assume { :end_inline_callOnFloor } true; 290588#L558-1 assume { :end_inline_initPersonOnFloor } true; 290587#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 290586#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 290585#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 290584#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 289744#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 289745#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 289767#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 289769#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 290583#L2148 assume !(0 != timeShift_~tmp___9~2#1); 289894#L2239 assume !(1 == ~doorState~0); 288354#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 288355#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 288687#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 288688#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 290177#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 288804#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 288805#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 289974#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 288806#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 288402#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 289266#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 290403#L1966-2 assume !(1 == ~currentHeading~0); 290408#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 290347#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 290348#L1982-5 assume { :end_inline_continueInDirection } true; 288673#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 296444#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 296443#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 296441#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 296438#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 296429#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 296423#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 296422#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 296421#L3022-2 [2022-07-13 04:04:25,367 INFO L754 eck$LassoCheckResult]: Loop: 296421#L3022-2 assume !false; 296420#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 296419#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 296418#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 296417#L3030 assume 1 != cleanup_~tmp___0~9#1; 296416#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 296415#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 296414#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 296412#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 296410#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 296408#L138-22 assume !(0 == isFloorCalling_~floorID#1); 290718#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 290704#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 290705#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 290688#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 290689#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 290684#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 290685#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 290670#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 290671#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 290666#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 290667#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 294702#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 294701#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 294699#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 294700#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 300146#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 300145#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 290513#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 290514#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 292779#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 292769#L2021-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 292759#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 292757#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 292722#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 292679#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 292672#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 292670#L1966-5 assume !(1 == ~currentHeading~0); 292664#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 292663#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 292650#L1982-11 assume { :end_inline_continueInDirection } true; 292646#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 292643#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 292640#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 292641#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 292642#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 292626#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 292619#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 292620#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 296421#L3022-2 [2022-07-13 04:04:25,367 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:25,368 INFO L85 PathProgramCache]: Analyzing trace with hash 1959658639, now seen corresponding path program 1 times [2022-07-13 04:04:25,368 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:25,368 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1889346693] [2022-07-13 04:04:25,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:25,368 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:25,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:25,386 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:25,386 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:25,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1889346693] [2022-07-13 04:04:25,386 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1889346693] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:25,386 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:25,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:25,387 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1090234801] [2022-07-13 04:04:25,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:25,387 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:25,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:25,387 INFO L85 PathProgramCache]: Analyzing trace with hash -954375247, now seen corresponding path program 1 times [2022-07-13 04:04:25,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:25,388 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1865427591] [2022-07-13 04:04:25,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:25,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:25,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:25,402 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:25,402 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:25,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1865427591] [2022-07-13 04:04:25,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1865427591] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:25,402 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:25,402 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:25,402 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347715191] [2022-07-13 04:04:25,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:25,403 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:25,403 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:25,403 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:25,403 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:25,404 INFO L87 Difference]: Start difference. First operand 15631 states and 28674 transitions. cyclomatic complexity: 13044 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:25,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:25,725 INFO L93 Difference]: Finished difference Result 49561 states and 91110 transitions. [2022-07-13 04:04:25,725 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:25,725 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 49561 states and 91110 transitions. [2022-07-13 04:04:25,916 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 46141 [2022-07-13 04:04:26,058 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 49561 states to 49561 states and 91110 transitions. [2022-07-13 04:04:26,059 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49561 [2022-07-13 04:04:26,092 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49561 [2022-07-13 04:04:26,092 INFO L73 IsDeterministic]: Start isDeterministic. Operand 49561 states and 91110 transitions. [2022-07-13 04:04:26,120 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:26,120 INFO L369 hiAutomatonCegarLoop]: Abstraction has 49561 states and 91110 transitions. [2022-07-13 04:04:26,140 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49561 states and 91110 transitions. [2022-07-13 04:04:26,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49561 to 15651. [2022-07-13 04:04:26,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15651 states, 15651 states have (on average 1.8333652801737907) internal successors, (28694), 15650 states have internal predecessors, (28694), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:26,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15651 states to 15651 states and 28694 transitions. [2022-07-13 04:04:26,390 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15651 states and 28694 transitions. [2022-07-13 04:04:26,390 INFO L374 stractBuchiCegarLoop]: Abstraction has 15651 states and 28694 transitions. [2022-07-13 04:04:26,390 INFO L287 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-07-13 04:04:26,390 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15651 states and 28694 transitions. [2022-07-13 04:04:26,431 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12398 [2022-07-13 04:04:26,432 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:26,432 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:26,433 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:26,433 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:26,433 INFO L752 eck$LassoCheckResult]: Stem: 354336#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 354337#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 353622#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 353623#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 354142#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 354143#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 355024#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 355025#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 355331#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 354285#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 354457#L414 assume 0 == initPersonOnFloor_~floor#1; 355134#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 353483#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 354404#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 354302#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 354426#L206 assume !(0 == callOnFloor_~floorID#1); 354427#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 354648#L218-2 assume { :end_inline_callOnFloor } true; 355947#L558 assume { :end_inline_initPersonOnFloor } true; 355946#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 355942#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 355939#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 355935#L414-1 assume 0 == initPersonOnFloor_~floor#1; 355907#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 355903#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 355901#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 355897#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 355896#L206-2 assume !(0 == callOnFloor_~floorID#1); 355895#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 355891#L218-5 assume { :end_inline_callOnFloor } true; 355890#L558-1 assume { :end_inline_initPersonOnFloor } true; 355889#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 355888#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 355887#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 355886#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 354956#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 354957#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 354982#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 354984#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 355883#L2148 assume !(0 != timeShift_~tmp___9~2#1); 355113#L2239 assume !(1 == ~doorState~0); 353557#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 353558#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 353890#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 353891#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 355417#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 354007#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 354009#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 355884#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 354010#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 353605#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 354471#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 355660#L1966-2 assume !(1 == ~currentHeading~0); 355667#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 355594#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 355595#L1982-5 assume { :end_inline_continueInDirection } true; 353874#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 353967#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 353968#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 355767#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 355219#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 355220#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 353584#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 354586#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 356300#L3022-2 [2022-07-13 04:04:26,434 INFO L754 eck$LassoCheckResult]: Loop: 356300#L3022-2 assume !false; 356294#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 356295#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 356281#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 356282#L3030 assume 1 != cleanup_~tmp___0~9#1; 356259#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 356260#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 356240#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 356241#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 356151#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 356153#L138-22 assume !(0 == isFloorCalling_~floorID#1); 359341#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 356127#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 356128#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 356090#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 356091#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 356086#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 356087#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 356084#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 356083#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 356082#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 356081#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 356079#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 356078#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 356076#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 356073#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 356057#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 356039#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 356026#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 356013#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 355991#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 355990#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 355989#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 355988#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 355492#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 354565#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 358322#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 358319#L1966-5 assume !(1 == ~currentHeading~0); 358316#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 358315#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 358312#L1982-11 assume { :end_inline_continueInDirection } true; 358310#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 358305#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 358303#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 358301#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 358299#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 358284#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 358250#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 356301#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 356300#L3022-2 [2022-07-13 04:04:26,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:26,434 INFO L85 PathProgramCache]: Analyzing trace with hash 1959658639, now seen corresponding path program 2 times [2022-07-13 04:04:26,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:26,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1184745466] [2022-07-13 04:04:26,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:26,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:26,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:26,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:26,454 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:26,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1184745466] [2022-07-13 04:04:26,454 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1184745466] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:26,454 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:26,454 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:26,454 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800069931] [2022-07-13 04:04:26,454 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:26,454 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:26,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:26,455 INFO L85 PathProgramCache]: Analyzing trace with hash 1346447343, now seen corresponding path program 1 times [2022-07-13 04:04:26,456 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:26,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2035033899] [2022-07-13 04:04:26,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:26,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:26,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:26,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:26,498 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:26,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2035033899] [2022-07-13 04:04:26,498 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2035033899] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:26,498 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:26,498 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:26,498 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1794883426] [2022-07-13 04:04:26,498 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:26,499 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:26,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:26,499 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 04:04:26,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-07-13 04:04:26,500 INFO L87 Difference]: Start difference. First operand 15651 states and 28694 transitions. cyclomatic complexity: 13044 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:27,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:27,857 INFO L93 Difference]: Finished difference Result 40510 states and 73590 transitions. [2022-07-13 04:04:27,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-07-13 04:04:27,858 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40510 states and 73590 transitions. [2022-07-13 04:04:28,022 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 37236 [2022-07-13 04:04:28,137 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40510 states to 40510 states and 73590 transitions. [2022-07-13 04:04:28,137 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40510 [2022-07-13 04:04:28,170 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40510 [2022-07-13 04:04:28,170 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40510 states and 73590 transitions. [2022-07-13 04:04:28,193 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:28,194 INFO L369 hiAutomatonCegarLoop]: Abstraction has 40510 states and 73590 transitions. [2022-07-13 04:04:28,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40510 states and 73590 transitions. [2022-07-13 04:04:28,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40510 to 22680. [2022-07-13 04:04:28,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22680 states, 22680 states have (on average 1.8410934744268077) internal successors, (41756), 22679 states have internal predecessors, (41756), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:28,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22680 states to 22680 states and 41756 transitions. [2022-07-13 04:04:28,526 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22680 states and 41756 transitions. [2022-07-13 04:04:28,526 INFO L374 stractBuchiCegarLoop]: Abstraction has 22680 states and 41756 transitions. [2022-07-13 04:04:28,526 INFO L287 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-07-13 04:04:28,526 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22680 states and 41756 transitions. [2022-07-13 04:04:28,589 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19430 [2022-07-13 04:04:28,589 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:28,589 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:28,594 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:28,594 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:28,595 INFO L752 eck$LassoCheckResult]: Stem: 410532#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 410533#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 409820#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 409821#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 410342#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 410343#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 411226#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 411227#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 411538#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 410482#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 410657#L414 assume 0 == initPersonOnFloor_~floor#1; 411339#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 409679#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 410604#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 410498#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 410626#L206 assume !(0 == callOnFloor_~floorID#1); 410627#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 410851#L218-2 assume { :end_inline_callOnFloor } true; 412193#L558 assume { :end_inline_initPersonOnFloor } true; 412192#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 412188#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 412185#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 412183#L414-1 assume 0 == initPersonOnFloor_~floor#1; 412155#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 412151#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 412149#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 412145#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 412144#L206-2 assume !(0 == callOnFloor_~floorID#1); 412143#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 412139#L218-5 assume { :end_inline_callOnFloor } true; 412138#L558-1 assume { :end_inline_initPersonOnFloor } true; 412137#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 412136#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 412135#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 412134#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 411159#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 411160#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 411185#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 411187#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 412131#L2148 assume !(0 != timeShift_~tmp___9~2#1); 411317#L2239 assume !(1 == ~doorState~0); 409755#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 409756#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 410090#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 410091#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 411633#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 410209#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 410211#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 412132#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 410212#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 409803#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 410670#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 411874#L1966-2 assume !(1 == ~currentHeading~0); 411881#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 411802#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 411803#L1982-5 assume { :end_inline_continueInDirection } true; 410076#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 412196#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 411985#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 411986#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 417864#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 412250#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 412251#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 417857#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 417855#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 417854#L3022-2 [2022-07-13 04:04:28,595 INFO L754 eck$LassoCheckResult]: Loop: 417854#L3022-2 assume !false; 417853#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 417852#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 417851#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 417850#L3030 assume 1 != cleanup_~tmp___0~9#1; 417849#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 417848#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 417847#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 417750#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 417749#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 417748#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 417747#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 417743#L138-26 assume !(0 == isFloorCalling_~floorID#1); 417744#L142-26 assume !(1 == isFloorCalling_~floorID#1); 417732#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 417733#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 417724#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 417725#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 416025#L2148-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 416018#L2150-2 assume !(0 != ~persons_0~0); 416012#L2150-3 assume !(0 != ~persons_1~0); 415987#L2164-1 assume !(0 != ~persons_2~0); 415917#L2178-1 assume !(0 != ~persons_3~0); 415891#L2192-1 assume !(0 != ~persons_4~0); 415867#L2206-1 assume !(0 != ~persons_5~0); 415862#L2220-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~10#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~10#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 415860#L234-12 assume 0 == isPersonOnFloor_~floor#1; 415841#L235-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 415811#L406-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 415809#L2049-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 415807#L2049-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 415806#L234-14 assume 0 == isPersonOnFloor_~floor#1; 415775#L235-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 415770#L406-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 415768#L2062-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 415769#L2062-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 416349#L234-16 assume 0 == isPersonOnFloor_~floor#1; 416295#L235-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 416276#L406-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 416266#L2075-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 416262#L2075-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 414936#L234-18 assume 0 == isPersonOnFloor_~floor#1; 414854#L235-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 414832#L406-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 414829#L2088-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 414826#L2088-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 414825#L234-20 assume 0 == isPersonOnFloor_~floor#1; 414783#L235-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 414758#L406-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 414756#L2101-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 414752#L2101-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 414753#L234-22 assume 0 == isPersonOnFloor_~floor#1; 414731#L235-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 414701#L406-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 414698#L2114-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 414700#L2114-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 417821#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 417822#L185-41 assume { :end_inline_resetCallOnFloor } true; 417929#L2127-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 417930#L1357-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 417915#L1369-5 assume { :end_inline_resetFloorButton } true; 417884#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 417883#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 417882#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 417881#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 417873#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 417869#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 417866#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 417865#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 417856#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 417854#L3022-2 [2022-07-13 04:04:28,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:28,596 INFO L85 PathProgramCache]: Analyzing trace with hash -1856171581, now seen corresponding path program 1 times [2022-07-13 04:04:28,596 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:28,596 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [609799421] [2022-07-13 04:04:28,596 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:28,596 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:28,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:28,627 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:28,627 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:28,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [609799421] [2022-07-13 04:04:28,628 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [609799421] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:28,628 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:28,628 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:28,628 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [330746860] [2022-07-13 04:04:28,628 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:28,629 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:28,629 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:28,629 INFO L85 PathProgramCache]: Analyzing trace with hash -822358371, now seen corresponding path program 1 times [2022-07-13 04:04:28,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:28,629 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1166008657] [2022-07-13 04:04:28,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:28,630 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:28,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:28,651 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:28,651 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:28,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1166008657] [2022-07-13 04:04:28,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1166008657] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:28,652 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:28,652 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:04:28,652 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [228051951] [2022-07-13 04:04:28,652 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:28,653 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:28,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:28,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 04:04:28,653 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 04:04:28,653 INFO L87 Difference]: Start difference. First operand 22680 states and 41756 transitions. cyclomatic complexity: 19077 Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:28,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:28,862 INFO L93 Difference]: Finished difference Result 45280 states and 83363 transitions. [2022-07-13 04:04:28,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 04:04:28,863 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45280 states and 83363 transitions. [2022-07-13 04:04:29,069 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 38860 [2022-07-13 04:04:29,212 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45280 states to 45280 states and 83363 transitions. [2022-07-13 04:04:29,212 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 45280 [2022-07-13 04:04:29,252 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45280 [2022-07-13 04:04:29,252 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45280 states and 83363 transitions. [2022-07-13 04:04:29,285 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:29,285 INFO L369 hiAutomatonCegarLoop]: Abstraction has 45280 states and 83363 transitions. [2022-07-13 04:04:29,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45280 states and 83363 transitions. [2022-07-13 04:04:29,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45280 to 22680. [2022-07-13 04:04:29,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22680 states, 22680 states have (on average 1.8408289241622575) internal successors, (41750), 22679 states have internal predecessors, (41750), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:29,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22680 states to 22680 states and 41750 transitions. [2022-07-13 04:04:29,623 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22680 states and 41750 transitions. [2022-07-13 04:04:29,623 INFO L374 stractBuchiCegarLoop]: Abstraction has 22680 states and 41750 transitions. [2022-07-13 04:04:29,623 INFO L287 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-07-13 04:04:29,623 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22680 states and 41750 transitions. [2022-07-13 04:04:29,686 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19430 [2022-07-13 04:04:29,686 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:29,686 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:29,690 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:29,690 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:29,691 INFO L752 eck$LassoCheckResult]: Stem: 478495#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 478496#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 477788#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 477789#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 478310#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 478311#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 479174#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 479175#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 479459#L3272 assume !(0 == getOrigin_~person#1); 479460#L3276 assume !(1 == getOrigin_~person#1); 478447#L3280 assume !(2 == getOrigin_~person#1); 478448#L3284 assume !(3 == getOrigin_~person#1); 479423#L3288 assume !(4 == getOrigin_~person#1); 479867#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 478615#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 478616#L414 assume 0 == initPersonOnFloor_~floor#1; 479278#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 477648#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 478562#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 478461#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 478584#L206 assume !(0 == callOnFloor_~floorID#1); 478586#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 477531#L218-2 assume { :end_inline_callOnFloor } true; 477532#L558 assume { :end_inline_initPersonOnFloor } true; 479563#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 479564#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 480011#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 480008#L414-1 assume 0 == initPersonOnFloor_~floor#1; 479980#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 479976#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 479974#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 479970#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 479969#L206-2 assume !(0 == callOnFloor_~floorID#1); 479968#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 479964#L218-5 assume { :end_inline_callOnFloor } true; 479963#L558-1 assume { :end_inline_initPersonOnFloor } true; 479962#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 479961#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 479960#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 479959#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 479112#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 479113#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 479133#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 479135#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 479956#L2148 assume !(0 != timeShift_~tmp___9~2#1); 479258#L2239 assume !(1 == ~doorState~0); 477723#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 477724#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 478057#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 478058#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 479542#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 478177#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 478179#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 479957#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 478180#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 477771#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 478629#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 479766#L1966-2 assume !(1 == ~currentHeading~0); 479773#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 479709#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 479710#L1982-5 assume { :end_inline_continueInDirection } true; 478043#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 480023#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 479861#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 479862#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 482371#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 482370#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 482367#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 482348#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 482345#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 482344#L3022-2 [2022-07-13 04:04:29,691 INFO L754 eck$LassoCheckResult]: Loop: 482344#L3022-2 assume !false; 482343#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 482342#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 482341#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 482340#L3030 assume 1 != cleanup_~tmp___0~9#1; 482339#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 482338#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 482337#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 482335#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 482336#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 488003#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 488002#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 488001#L138-26 assume !(0 == isFloorCalling_~floorID#1); 487999#L142-26 assume !(1 == isFloorCalling_~floorID#1); 487996#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 487991#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 487986#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 487985#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 487984#L2148-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 480143#L2150-2 assume !(0 != ~persons_0~0); 487972#L2150-3 assume !(0 != ~persons_1~0); 487947#L2164-1 assume !(0 != ~persons_2~0); 487877#L2178-1 assume !(0 != ~persons_3~0); 487851#L2192-1 assume !(0 != ~persons_4~0); 487827#L2206-1 assume !(0 != ~persons_5~0); 487822#L2220-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~10#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~10#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 487820#L234-12 assume 0 == isPersonOnFloor_~floor#1; 487801#L235-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 487771#L406-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 487769#L2049-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 487767#L2049-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 487766#L234-14 assume 0 == isPersonOnFloor_~floor#1; 487735#L235-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 487730#L406-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 487728#L2062-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 487729#L2062-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 489366#L234-16 assume 0 == isPersonOnFloor_~floor#1; 485702#L235-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 485690#L406-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 485688#L2075-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 485686#L2075-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 485685#L234-18 assume 0 == isPersonOnFloor_~floor#1; 485665#L235-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 485649#L406-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 485647#L2088-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 485648#L2088-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 487673#L234-20 assume 0 == isPersonOnFloor_~floor#1; 487089#L235-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 487066#L406-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 487064#L2101-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 487065#L2101-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 488181#L234-22 assume 0 == isPersonOnFloor_~floor#1; 488102#L235-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 488071#L406-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 488069#L2114-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 488067#L2114-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 488066#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 485383#L185-41 assume { :end_inline_resetCallOnFloor } true; 485377#L2127-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 485363#L1357-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 482389#L1369-5 assume { :end_inline_resetFloorButton } true; 482385#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 482383#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 482380#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 482378#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 482359#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 482352#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 482349#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 482347#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 482346#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 482344#L3022-2 [2022-07-13 04:04:29,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:29,692 INFO L85 PathProgramCache]: Analyzing trace with hash -519631534, now seen corresponding path program 1 times [2022-07-13 04:04:29,692 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:29,692 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1649986148] [2022-07-13 04:04:29,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:29,692 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:29,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:29,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:29,736 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:29,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1649986148] [2022-07-13 04:04:29,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1649986148] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:29,736 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:29,736 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 04:04:29,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [639259866] [2022-07-13 04:04:29,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:29,736 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:29,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:29,737 INFO L85 PathProgramCache]: Analyzing trace with hash -822358371, now seen corresponding path program 2 times [2022-07-13 04:04:29,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:29,737 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [743954665] [2022-07-13 04:04:29,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:29,737 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:29,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:29,756 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:29,756 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:29,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [743954665] [2022-07-13 04:04:29,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [743954665] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:29,756 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:29,757 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:04:29,757 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1947885718] [2022-07-13 04:04:29,757 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:29,757 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:29,757 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:29,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:04:29,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:04:29,759 INFO L87 Difference]: Start difference. First operand 22680 states and 41750 transitions. cyclomatic complexity: 19071 Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:31,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:31,130 INFO L93 Difference]: Finished difference Result 40349 states and 73145 transitions. [2022-07-13 04:04:31,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 04:04:31,131 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40349 states and 73145 transitions. [2022-07-13 04:04:31,404 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 35196 [2022-07-13 04:04:31,505 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40349 states to 40349 states and 73145 transitions. [2022-07-13 04:04:31,505 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40349 [2022-07-13 04:04:31,535 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40349 [2022-07-13 04:04:31,536 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40349 states and 73145 transitions. [2022-07-13 04:04:31,563 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:31,563 INFO L369 hiAutomatonCegarLoop]: Abstraction has 40349 states and 73145 transitions. [2022-07-13 04:04:31,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40349 states and 73145 transitions. [2022-07-13 04:04:31,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40349 to 22584. [2022-07-13 04:04:31,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22584 states, 22584 states have (on average 1.8394438540559688) internal successors, (41542), 22583 states have internal predecessors, (41542), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:31,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22584 states to 22584 states and 41542 transitions. [2022-07-13 04:04:31,860 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22584 states and 41542 transitions. [2022-07-13 04:04:31,860 INFO L374 stractBuchiCegarLoop]: Abstraction has 22584 states and 41542 transitions. [2022-07-13 04:04:31,860 INFO L287 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-07-13 04:04:31,860 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22584 states and 41542 transitions. [2022-07-13 04:04:31,923 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19334 [2022-07-13 04:04:31,923 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:31,923 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:31,928 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:31,928 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:31,928 INFO L752 eck$LassoCheckResult]: Stem: 541547#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 541548#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 540840#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 540841#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 541359#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 541360#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 542223#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 542224#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 542519#L3272 assume !(0 == getOrigin_~person#1); 542520#L3276 assume !(1 == getOrigin_~person#1); 541498#L3280 assume !(2 == getOrigin_~person#1); 541499#L3284 assume !(3 == getOrigin_~person#1); 542480#L3288 assume !(4 == getOrigin_~person#1); 542940#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 541668#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 541669#L414 assume 0 == initPersonOnFloor_~floor#1; 542332#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 540701#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 541616#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 541513#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 541638#L206 assume !(0 == callOnFloor_~floorID#1); 541639#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 541862#L218-2 assume { :end_inline_callOnFloor } true; 543114#L558 assume { :end_inline_initPersonOnFloor } true; 543113#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 543109#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 543106#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 543102#L414-1 assume 0 == initPersonOnFloor_~floor#1; 543074#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 543070#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 543068#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 543064#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 543063#L206-2 assume !(0 == callOnFloor_~floorID#1); 543062#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 543058#L218-5 assume { :end_inline_callOnFloor } true; 543057#L558-1 assume { :end_inline_initPersonOnFloor } true; 543056#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 543055#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 543054#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 543053#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 542160#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 542161#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 542181#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 542183#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 543052#L2148 assume !(0 != timeShift_~tmp___9~2#1); 542314#L2239 assume !(1 == ~doorState~0); 540775#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 540776#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 541108#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 541109#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 542612#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 541226#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 541228#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 543115#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 541229#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 540823#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 541682#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 542840#L1966-2 assume !(1 == ~currentHeading~0); 542845#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 542777#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 542778#L1982-5 assume { :end_inline_continueInDirection } true; 541094#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 541184#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 541185#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 542935#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 550009#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 550007#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 550001#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 549994#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 541890#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 541891#L3022-2 [2022-07-13 04:04:31,928 INFO L754 eck$LassoCheckResult]: Loop: 541891#L3022-2 assume !false; 542098#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 540739#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 540740#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 563084#L3030 assume 1 != cleanup_~tmp___0~9#1; 563083#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 563082#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 563081#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 563080#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 542575#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 557284#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 550338#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 549981#L138-26 assume !(0 == isFloorCalling_~floorID#1); 549982#L142-26 assume !(1 == isFloorCalling_~floorID#1); 549976#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 549973#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 549970#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 549971#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 561710#L2148-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 543134#L2150-2 assume !(0 != ~persons_0~0); 561698#L2150-3 assume !(0 != ~persons_1~0); 561667#L2164-1 assume !(0 != ~persons_2~0); 561661#L2178-1 assume !(0 != ~persons_3~0); 561635#L2192-1 assume !(0 != ~persons_4~0); 561611#L2206-1 assume !(0 != ~persons_5~0); 561610#L2220-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~10#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~10#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561609#L234-12 assume !(0 == isPersonOnFloor_~floor#1); 561608#L267-12 assume 1 == isPersonOnFloor_~floor#1; 561581#L268-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561562#L406-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 561560#L2049-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 561558#L2049-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561557#L234-14 assume 0 == isPersonOnFloor_~floor#1; 561526#L235-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561521#L406-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 561519#L2062-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 561517#L2062-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561516#L234-16 assume 0 == isPersonOnFloor_~floor#1; 561491#L235-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561479#L406-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 561477#L2075-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 561475#L2075-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561472#L234-18 assume 0 == isPersonOnFloor_~floor#1; 561454#L235-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561438#L406-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 561436#L2088-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 561437#L2088-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561974#L234-20 assume 0 == isPersonOnFloor_~floor#1; 561963#L235-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561940#L406-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 561938#L2101-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 561939#L2101-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 562082#L234-22 assume 0 == isPersonOnFloor_~floor#1; 562076#L235-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 562046#L406-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 562044#L2114-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 562045#L2114-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 563118#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 541904#L185-41 assume { :end_inline_resetCallOnFloor } true; 543048#L2127-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 542015#L1357-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 540872#L1369-5 assume { :end_inline_resetFloorButton } true; 541842#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 542013#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 540905#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 540906#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 541320#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 542644#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 541887#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 541780#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 542334#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 541891#L3022-2 [2022-07-13 04:04:31,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:31,929 INFO L85 PathProgramCache]: Analyzing trace with hash -519631534, now seen corresponding path program 2 times [2022-07-13 04:04:31,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:31,929 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [316519717] [2022-07-13 04:04:31,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:31,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:31,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:31,962 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:31,962 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:31,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [316519717] [2022-07-13 04:04:31,962 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [316519717] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:31,963 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:31,963 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 04:04:31,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [520730497] [2022-07-13 04:04:31,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:31,963 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:31,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:31,964 INFO L85 PathProgramCache]: Analyzing trace with hash -996207651, now seen corresponding path program 1 times [2022-07-13 04:04:31,964 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:31,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [827264808] [2022-07-13 04:04:31,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:31,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:31,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:31,987 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:31,987 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:31,987 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [827264808] [2022-07-13 04:04:31,987 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [827264808] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:31,987 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:31,988 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:04:31,988 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1788984310] [2022-07-13 04:04:31,988 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:31,988 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:31,988 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:31,988 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 04:04:31,989 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 04:04:31,989 INFO L87 Difference]: Start difference. First operand 22584 states and 41542 transitions. cyclomatic complexity: 18959 Second operand has 6 states, 6 states have (on average 11.666666666666666) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:32,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:32,371 INFO L93 Difference]: Finished difference Result 67502 states and 124171 transitions. [2022-07-13 04:04:32,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 04:04:32,372 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 67502 states and 124171 transitions. [2022-07-13 04:04:32,662 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 58002 [2022-07-13 04:04:32,882 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 67502 states to 67502 states and 124171 transitions. [2022-07-13 04:04:32,882 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 67502 [2022-07-13 04:04:32,942 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 67502 [2022-07-13 04:04:32,942 INFO L73 IsDeterministic]: Start isDeterministic. Operand 67502 states and 124171 transitions. [2022-07-13 04:04:32,988 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:32,988 INFO L369 hiAutomatonCegarLoop]: Abstraction has 67502 states and 124171 transitions. [2022-07-13 04:04:33,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67502 states and 124171 transitions. [2022-07-13 04:04:33,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67502 to 22582. [2022-07-13 04:04:33,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22582 states, 22582 states have (on average 1.8392082189354353) internal successors, (41533), 22581 states have internal predecessors, (41533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:33,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22582 states to 22582 states and 41533 transitions. [2022-07-13 04:04:33,448 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22582 states and 41533 transitions. [2022-07-13 04:04:33,448 INFO L374 stractBuchiCegarLoop]: Abstraction has 22582 states and 41533 transitions. [2022-07-13 04:04:33,448 INFO L287 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-07-13 04:04:33,448 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22582 states and 41533 transitions. [2022-07-13 04:04:33,510 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19334 [2022-07-13 04:04:33,510 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:33,510 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:33,514 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:33,515 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:33,515 INFO L752 eck$LassoCheckResult]: Stem: 631644#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 631645#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 630949#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 630950#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 631463#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 631464#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 632319#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 632320#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 632597#L3272 assume !(0 == getOrigin_~person#1); 632598#L3276 assume !(1 == getOrigin_~person#1); 631598#L3280 assume !(2 == getOrigin_~person#1); 631599#L3284 assume !(3 == getOrigin_~person#1); 632560#L3288 assume !(4 == getOrigin_~person#1); 633002#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 631765#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 631766#L414 assume !(0 == initPersonOnFloor_~floor#1); 630725#L441 assume 1 == initPersonOnFloor_~floor#1; 630726#L442 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 630808#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 631711#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 631612#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 631733#L206 assume !(0 == callOnFloor_~floorID#1); 631734#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 631952#L218-2 assume { :end_inline_callOnFloor } true; 632793#L558 assume { :end_inline_initPersonOnFloor } true; 632794#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 632128#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 631902#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 632255#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 633083#L441-1 assume 1 == initPersonOnFloor_~floor#1; 633128#L442-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 633107#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 633105#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 633101#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 633100#L206-2 assume !(0 == callOnFloor_~floorID#1); 633099#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 633095#L218-5 assume { :end_inline_callOnFloor } true; 633094#L558-1 assume { :end_inline_initPersonOnFloor } true; 633093#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 633092#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 633091#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 633090#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 632253#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 632254#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 632275#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 632277#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 633086#L2148 assume !(0 != timeShift_~tmp___9~2#1); 632403#L2239 assume !(1 == ~doorState~0); 630884#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 630885#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 631215#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 631216#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 632679#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 631330#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 631332#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 633088#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 631333#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 630932#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 631779#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 632901#L1966-2 assume !(1 == ~currentHeading~0); 632907#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 632841#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 632842#L1982-5 assume { :end_inline_continueInDirection } true; 631199#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 631291#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 631292#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 630674#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 630675#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 632728#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 632256#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 630911#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 631890#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 631978#L3022-2 [2022-07-13 04:04:33,516 INFO L754 eck$LassoCheckResult]: Loop: 631978#L3022-2 assume !false; 651570#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 651569#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 636701#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 636700#L3030 assume 1 != cleanup_~tmp___0~9#1; 636699#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 636698#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 636697#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 636696#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 636462#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 636461#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 636460#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 636459#L138-26 assume !(0 == isFloorCalling_~floorID#1); 636453#L142-26 assume !(1 == isFloorCalling_~floorID#1); 636454#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 641146#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 641143#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 641141#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 641138#L2148-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 641131#L2150-2 assume !(0 != ~persons_0~0); 641125#L2150-3 assume !(0 != ~persons_1~0); 641094#L2164-1 assume !(0 != ~persons_2~0); 641088#L2178-1 assume !(0 != ~persons_3~0); 641062#L2192-1 assume !(0 != ~persons_4~0); 640977#L2206-1 assume !(0 != ~persons_5~0); 640970#L2220-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~10#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~10#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640546#L234-12 assume !(0 == isPersonOnFloor_~floor#1); 640539#L267-12 assume 1 == isPersonOnFloor_~floor#1; 640517#L268-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640503#L406-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 640501#L2049-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 640499#L2049-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640498#L234-14 assume 0 == isPersonOnFloor_~floor#1; 640459#L235-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640453#L406-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 640451#L2062-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 640449#L2062-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640448#L234-16 assume 0 == isPersonOnFloor_~floor#1; 640417#L235-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640405#L406-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 640403#L2075-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 640401#L2075-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640394#L234-18 assume 0 == isPersonOnFloor_~floor#1; 640188#L235-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640171#L406-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 640169#L2088-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 640167#L2088-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640165#L234-20 assume 0 == isPersonOnFloor_~floor#1; 640150#L235-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640126#L406-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 640124#L2101-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 640122#L2101-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640121#L234-22 assume 0 == isPersonOnFloor_~floor#1; 640115#L235-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640085#L406-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 640083#L2114-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 640084#L2114-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 643390#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 631995#L185-41 assume { :end_inline_resetCallOnFloor } true; 651596#L2127-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 651593#L1357-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 644894#L1369-5 assume { :end_inline_resetFloorButton } true; 631933#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 651588#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 651586#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 651584#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 651580#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 651576#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 651573#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 651572#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 651571#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 631978#L3022-2 [2022-07-13 04:04:33,516 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:33,516 INFO L85 PathProgramCache]: Analyzing trace with hash 777262428, now seen corresponding path program 1 times [2022-07-13 04:04:33,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:33,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1592582791] [2022-07-13 04:04:33,516 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:33,516 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:33,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:33,553 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:33,553 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:33,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1592582791] [2022-07-13 04:04:33,554 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1592582791] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:33,554 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:33,554 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:33,554 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [626859194] [2022-07-13 04:04:33,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:33,554 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:33,555 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:33,555 INFO L85 PathProgramCache]: Analyzing trace with hash -996207651, now seen corresponding path program 2 times [2022-07-13 04:04:33,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:33,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [254862402] [2022-07-13 04:04:33,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:33,555 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:33,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:33,574 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:33,574 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:33,574 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [254862402] [2022-07-13 04:04:33,575 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [254862402] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:33,575 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:33,575 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:04:33,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [179139803] [2022-07-13 04:04:33,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:33,575 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:33,575 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:33,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:04:33,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:04:33,576 INFO L87 Difference]: Start difference. First operand 22582 states and 41533 transitions. cyclomatic complexity: 18952 Second operand has 5 states, 5 states have (on average 14.2) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:34,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:34,974 INFO L93 Difference]: Finished difference Result 53921 states and 97302 transitions. [2022-07-13 04:04:34,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 04:04:34,975 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53921 states and 97302 transitions. [2022-07-13 04:04:35,221 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 48966 [2022-07-13 04:04:35,397 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53921 states to 53921 states and 97302 transitions. [2022-07-13 04:04:35,398 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53921 [2022-07-13 04:04:35,444 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53921 [2022-07-13 04:04:35,444 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53921 states and 97302 transitions. [2022-07-13 04:04:35,486 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:35,486 INFO L369 hiAutomatonCegarLoop]: Abstraction has 53921 states and 97302 transitions. [2022-07-13 04:04:35,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53921 states and 97302 transitions. [2022-07-13 04:04:35,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53921 to 29492. [2022-07-13 04:04:35,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29492 states, 29492 states have (on average 1.8404991184049913) internal successors, (54280), 29491 states have internal predecessors, (54280), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:35,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29492 states to 29492 states and 54280 transitions. [2022-07-13 04:04:35,949 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29492 states and 54280 transitions. [2022-07-13 04:04:35,949 INFO L374 stractBuchiCegarLoop]: Abstraction has 29492 states and 54280 transitions. [2022-07-13 04:04:35,949 INFO L287 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-07-13 04:04:35,949 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29492 states and 54280 transitions. [2022-07-13 04:04:36,041 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:36,041 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:36,041 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:36,045 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:36,045 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:36,046 INFO L752 eck$LassoCheckResult]: Stem: 708176#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 708177#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 707472#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 707473#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 707987#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 707988#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 708871#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 708872#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 709166#L3272 assume !(0 == getOrigin_~person#1); 709167#L3276 assume !(1 == getOrigin_~person#1); 708128#L3280 assume !(2 == getOrigin_~person#1); 708129#L3284 assume !(3 == getOrigin_~person#1); 709123#L3288 assume !(4 == getOrigin_~person#1); 709590#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 708298#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 708299#L414 assume !(0 == initPersonOnFloor_~floor#1); 707255#L441 assume 1 == initPersonOnFloor_~floor#1; 707256#L442 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 707333#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 708246#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 708144#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 708268#L206 assume !(0 == callOnFloor_~floorID#1); 708269#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 708490#L218-2 assume { :end_inline_callOnFloor } true; 709769#L558 assume { :end_inline_initPersonOnFloor } true; 709768#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 709767#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 709760#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 709765#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 709756#L441-1 assume 1 == initPersonOnFloor_~floor#1; 709745#L442-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 709723#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 709721#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 709717#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 709716#L206-2 assume !(0 == callOnFloor_~floorID#1); 709715#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 709711#L218-5 assume { :end_inline_callOnFloor } true; 709710#L558-1 assume { :end_inline_initPersonOnFloor } true; 709709#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 709708#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 709707#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 709706#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 708799#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 708800#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 708825#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 708827#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 709705#L2148 assume !(0 != timeShift_~tmp___9~2#1); 708956#L2239 assume !(1 == ~doorState~0); 707407#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 707408#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 707739#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 707740#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 709253#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 707855#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 707857#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 709770#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 707858#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 707455#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 708313#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 709477#L1966-2 assume !(1 == ~currentHeading~0); 709483#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 709416#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 709417#L1982-5 assume { :end_inline_continueInDirection } true; 707724#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 707815#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 707816#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 709584#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 715297#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 715295#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 715289#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 715282#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 708516#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 708517#L3022-2 [2022-07-13 04:04:36,046 INFO L754 eck$LassoCheckResult]: Loop: 708517#L3022-2 assume !false; 716475#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 716471#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 716472#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 716467#L3030 assume 1 != cleanup_~tmp___0~9#1; 716468#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 716463#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 716464#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 716459#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 716455#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 716457#L138-22 assume !(0 == isFloorCalling_~floorID#1); 716372#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 716369#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 716355#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 716351#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 716343#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 716344#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 719761#L138-26 assume !(0 == isFloorCalling_~floorID#1); 719762#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 723660#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 732971#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 732972#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 732977#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 732973#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 732970#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 732968#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 732967#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 723586#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 723584#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 723581#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 723577#L1759-2 assume !(0 == ~currentFloorID~0); 723573#L1765-2 assume ~currentFloorID~0 > 0; 723572#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 723571#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 723558#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 723553#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 723538#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 723532#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 723530#L1966-3 assume !(1 == ~currentHeading~0); 723386#L1976-9 assume !(0 == ~currentFloorID~0); 715096#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 715092#L1982-7 assume { :end_inline_continueInDirection } true; 715091#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 715053#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 715050#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 715048#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 715042#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 715043#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 710127#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 710128#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 710064#L3022-2 assume !false; 710065#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 710056#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 710057#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 710048#L3030 assume 1 != cleanup_~tmp___0~9#1; 710049#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 710040#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 710041#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 710031#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 710032#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 710021#L138-22 assume !(0 == isFloorCalling_~floorID#1); 710022#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 709997#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 709998#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 709979#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 709980#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 709969#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 709970#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 709963#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 709961#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 709959#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 709957#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 709953#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 709955#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 715155#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 715422#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 715421#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 715419#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 715420#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 715385#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 715484#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 715364#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 715482#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 715480#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 715442#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 715369#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 715365#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 715359#L1966-5 assume !(1 == ~currentHeading~0); 715353#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 715349#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 709657#L1982-11 assume { :end_inline_continueInDirection } true; 708471#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 721707#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 721698#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 721699#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 723627#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 721686#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 721687#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 716478#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 716479#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 708517#L3022-2 [2022-07-13 04:04:36,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:36,047 INFO L85 PathProgramCache]: Analyzing trace with hash 777262428, now seen corresponding path program 2 times [2022-07-13 04:04:36,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:36,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [339294681] [2022-07-13 04:04:36,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:36,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:36,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:36,069 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:36,070 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:36,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [339294681] [2022-07-13 04:04:36,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [339294681] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:36,070 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:36,070 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:36,070 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1879708225] [2022-07-13 04:04:36,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:36,071 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:36,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:36,071 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 1 times [2022-07-13 04:04:36,071 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:36,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [368838901] [2022-07-13 04:04:36,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:36,072 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:36,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:36,112 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:36,112 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:36,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [368838901] [2022-07-13 04:04:36,113 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [368838901] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:36,113 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:36,113 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:36,113 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1313316563] [2022-07-13 04:04:36,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:36,113 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:36,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:36,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:36,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:36,114 INFO L87 Difference]: Start difference. First operand 29492 states and 54280 transitions. cyclomatic complexity: 24789 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:36,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:36,449 INFO L93 Difference]: Finished difference Result 58894 states and 108384 transitions. [2022-07-13 04:04:36,449 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:36,449 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58894 states and 108384 transitions. [2022-07-13 04:04:36,701 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-13 04:04:36,890 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58894 states to 58894 states and 108384 transitions. [2022-07-13 04:04:36,890 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58894 [2022-07-13 04:04:36,940 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58894 [2022-07-13 04:04:36,940 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58894 states and 108384 transitions. [2022-07-13 04:04:36,981 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:36,981 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58894 states and 108384 transitions. [2022-07-13 04:04:37,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58894 states and 108384 transitions. [2022-07-13 04:04:37,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58894 to 29492. [2022-07-13 04:04:37,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29492 states, 29492 states have (on average 1.8400244134002441) internal successors, (54266), 29491 states have internal predecessors, (54266), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:37,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29492 states to 29492 states and 54266 transitions. [2022-07-13 04:04:37,419 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29492 states and 54266 transitions. [2022-07-13 04:04:37,419 INFO L374 stractBuchiCegarLoop]: Abstraction has 29492 states and 54266 transitions. [2022-07-13 04:04:37,419 INFO L287 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-07-13 04:04:37,419 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29492 states and 54266 transitions. [2022-07-13 04:04:37,508 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:37,508 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:37,508 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:37,512 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:37,512 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:37,513 INFO L752 eck$LassoCheckResult]: Stem: 796576#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 796577#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 795874#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 795875#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 796391#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 796392#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 797266#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 797267#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 797562#L3272 assume !(0 == getOrigin_~person#1); 797563#L3276 assume !(1 == getOrigin_~person#1); 796529#L3280 assume !(2 == getOrigin_~person#1); 796530#L3284 assume !(3 == getOrigin_~person#1); 797519#L3288 assume !(4 == getOrigin_~person#1); 797983#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 796696#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 796697#L414 assume !(0 == initPersonOnFloor_~floor#1); 795650#L441 assume 1 == initPersonOnFloor_~floor#1; 795651#L442 assume !(0 == initPersonOnFloor_~person#1); 796222#L445 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 795733#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 796644#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 796544#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 796666#L206 assume !(0 == callOnFloor_~floorID#1); 796667#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 796896#L218-2 assume { :end_inline_callOnFloor } true; 797761#L558 assume { :end_inline_initPersonOnFloor } true; 797762#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 797076#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 796843#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 798151#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 798143#L441-1 assume 1 == initPersonOnFloor_~floor#1; 798150#L442-2 assume !(0 == initPersonOnFloor_~person#1); 798135#L445-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 798116#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 798114#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 798110#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 798109#L206-2 assume !(0 == callOnFloor_~floorID#1); 798108#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 798104#L218-5 assume { :end_inline_callOnFloor } true; 798103#L558-1 assume { :end_inline_initPersonOnFloor } true; 798102#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798101#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798099#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 798098#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 797198#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 797199#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 797223#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 797225#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 798092#L2148 assume !(0 != timeShift_~tmp___9~2#1); 797354#L2239 assume !(1 == ~doorState~0); 795809#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 795810#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 796141#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 796142#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 797643#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 796256#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 796258#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 798093#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 796259#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 795857#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 796710#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 797876#L1966-2 assume !(1 == ~currentHeading~0); 797883#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 797814#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 797815#L1982-5 assume { :end_inline_continueInDirection } true; 796127#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 800326#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 797976#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 797977#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 804345#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 804343#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 804337#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 804330#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 804327#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 804328#L3022-2 [2022-07-13 04:04:37,513 INFO L754 eck$LassoCheckResult]: Loop: 804328#L3022-2 assume !false; 804323#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 804324#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 804319#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 804320#L3030 assume 1 != cleanup_~tmp___0~9#1; 804315#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 804316#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 804311#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 804312#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 804305#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 804307#L138-22 assume !(0 == isFloorCalling_~floorID#1); 816948#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 816944#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 816927#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 816921#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 816909#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 816907#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 816905#L138-26 assume !(0 == isFloorCalling_~floorID#1); 816901#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 816896#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 816893#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 816894#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 816900#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 816895#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 816892#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 816890#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 816889#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 800667#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 800666#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 800664#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 800665#L1759-2 assume !(0 == ~currentFloorID~0); 801014#L1765-2 assume ~currentFloorID~0 > 0; 801013#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 801012#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 801011#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 800589#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 800576#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 800429#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 800423#L1966-3 assume !(1 == ~currentHeading~0); 800415#L1976-9 assume !(0 == ~currentFloorID~0); 800405#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 800400#L1982-7 assume { :end_inline_continueInDirection } true; 800337#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 800336#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 800333#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 800334#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 800335#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 798550#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 798519#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 798485#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 798484#L3022-2 assume !false; 798483#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 798482#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 798481#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 798480#L3030 assume 1 != cleanup_~tmp___0~9#1; 798479#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798478#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798477#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 798475#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 798472#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798471#L138-22 assume !(0 == isFloorCalling_~floorID#1); 798460#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798444#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 798445#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 798423#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 798424#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 798410#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798411#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798407#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 798406#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 798405#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 798404#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 798402#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 798401#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 798399#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 798398#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 798397#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 797988#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 797989#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 798011#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 804133#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 804131#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 804130#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 804121#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 797714#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 797715#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 809436#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 809433#L1966-5 assume !(1 == ~currentHeading~0); 809418#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 809413#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 809404#L1982-11 assume { :end_inline_continueInDirection } true; 809402#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 809392#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 809393#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 809385#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 809383#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 809384#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 804358#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 804350#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 804329#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 804328#L3022-2 [2022-07-13 04:04:37,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:37,513 INFO L85 PathProgramCache]: Analyzing trace with hash 234391820, now seen corresponding path program 1 times [2022-07-13 04:04:37,514 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:37,514 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1711330740] [2022-07-13 04:04:37,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:37,514 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:37,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:37,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:37,536 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:37,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1711330740] [2022-07-13 04:04:37,537 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1711330740] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:37,537 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:37,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:37,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330901394] [2022-07-13 04:04:37,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:37,537 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:37,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:37,538 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 2 times [2022-07-13 04:04:37,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:37,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [402606120] [2022-07-13 04:04:37,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:37,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:37,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:37,566 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:37,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:37,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [402606120] [2022-07-13 04:04:37,567 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [402606120] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:37,567 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:37,567 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:37,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2040299596] [2022-07-13 04:04:37,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:37,567 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:37,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:37,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:37,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:37,568 INFO L87 Difference]: Start difference. First operand 29492 states and 54266 transitions. cyclomatic complexity: 24775 Second operand has 4 states, 4 states have (on average 18.5) internal successors, (74), 4 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:37,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:37,890 INFO L93 Difference]: Finished difference Result 58894 states and 108362 transitions. [2022-07-13 04:04:37,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:37,891 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58894 states and 108362 transitions. [2022-07-13 04:04:38,133 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-13 04:04:38,306 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58894 states to 58894 states and 108362 transitions. [2022-07-13 04:04:38,306 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58894 [2022-07-13 04:04:38,353 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58894 [2022-07-13 04:04:38,353 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58894 states and 108362 transitions. [2022-07-13 04:04:38,390 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:38,390 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58894 states and 108362 transitions. [2022-07-13 04:04:38,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58894 states and 108362 transitions. [2022-07-13 04:04:38,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58894 to 29492. [2022-07-13 04:04:38,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29492 states, 29492 states have (on average 1.839549708395497) internal successors, (54252), 29491 states have internal predecessors, (54252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:38,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29492 states to 29492 states and 54252 transitions. [2022-07-13 04:04:38,998 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29492 states and 54252 transitions. [2022-07-13 04:04:38,998 INFO L374 stractBuchiCegarLoop]: Abstraction has 29492 states and 54252 transitions. [2022-07-13 04:04:38,998 INFO L287 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-07-13 04:04:38,998 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29492 states and 54252 transitions. [2022-07-13 04:04:39,074 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:39,074 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:39,074 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:39,077 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:39,078 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:39,078 INFO L752 eck$LassoCheckResult]: Stem: 884973#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 884974#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 884272#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 884273#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 884784#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 884785#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 885661#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 885662#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 885960#L3272 assume !(0 == getOrigin_~person#1); 885961#L3276 assume !(1 == getOrigin_~person#1); 884922#L3280 assume !(2 == getOrigin_~person#1); 884923#L3284 assume !(3 == getOrigin_~person#1); 885919#L3288 assume !(4 == getOrigin_~person#1); 886388#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 885097#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 885098#L414 assume !(0 == initPersonOnFloor_~floor#1); 884050#L441 assume 1 == initPersonOnFloor_~floor#1; 884051#L442 assume !(0 == initPersonOnFloor_~person#1); 884612#L445 assume !(1 == initPersonOnFloor_~person#1); 884613#L448 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 884133#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 885042#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 884941#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 885065#L206 assume !(0 == callOnFloor_~floorID#1); 885067#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 884016#L218-2 assume { :end_inline_callOnFloor } true; 884017#L558 assume { :end_inline_initPersonOnFloor } true; 886065#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 886066#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 885095#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 886546#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 886492#L441-1 assume 1 == initPersonOnFloor_~floor#1; 886542#L442-2 assume !(0 == initPersonOnFloor_~person#1); 886538#L445-2 assume !(1 == initPersonOnFloor_~person#1); 886529#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 886513#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 886511#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 886507#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 886506#L206-2 assume !(0 == callOnFloor_~floorID#1); 886505#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 886501#L218-5 assume { :end_inline_callOnFloor } true; 886500#L558-1 assume { :end_inline_initPersonOnFloor } true; 886499#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 886498#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 886497#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 886496#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 885597#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 885598#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 885618#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 885620#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 886487#L2148 assume !(0 != timeShift_~tmp___9~2#1); 885751#L2239 assume !(1 == ~doorState~0); 884207#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 884208#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 884534#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 884535#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 886046#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 884648#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 884650#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 886489#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 884651#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 884255#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 885111#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 886284#L1966-2 assume !(1 == ~currentHeading~0); 886291#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 886224#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 886225#L1982-5 assume { :end_inline_continueInDirection } true; 884517#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 884610#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 884611#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 886381#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 890905#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 890904#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 890901#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 890885#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 890882#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 890881#L3022-2 [2022-07-13 04:04:39,078 INFO L754 eck$LassoCheckResult]: Loop: 890881#L3022-2 assume !false; 890880#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 890879#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 890878#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 890877#L3030 assume 1 != cleanup_~tmp___0~9#1; 890876#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 889389#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 889388#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 889386#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 889384#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 889383#L138-22 assume !(0 == isFloorCalling_~floorID#1); 888611#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 888603#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 888330#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 888317#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 888316#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 888315#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 888313#L138-26 assume !(0 == isFloorCalling_~floorID#1); 888314#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 891950#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 891942#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 891943#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 891930#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 891926#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 891920#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 891918#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 891917#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 886904#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 886902#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 886896#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 886409#L1759-2 assume !(0 == ~currentFloorID~0); 885394#L1765-2 assume ~currentFloorID~0 > 0; 885395#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 884287#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 884288#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 886172#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 886173#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 887240#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 887520#L1966-3 assume !(1 == ~currentHeading~0); 887827#L1976-9 assume !(0 == ~currentFloorID~0); 887825#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 887395#L1982-7 assume { :end_inline_continueInDirection } true; 887393#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 887391#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 887387#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 887388#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 887383#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 887351#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 887343#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 887340#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 887337#L3022-2 assume !false; 887334#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 887331#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 887328#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 887325#L3030 assume 1 != cleanup_~tmp___0~9#1; 887322#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 887319#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 887317#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 887314#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 887315#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 888354#L138-22 assume !(0 == isFloorCalling_~floorID#1); 888272#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 888241#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 888242#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 887310#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 887311#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 887289#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 887290#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 887283#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 887281#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 887279#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 887277#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 887274#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 887259#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 887260#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 884980#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 884981#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 886223#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 886391#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 885129#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 887216#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 887215#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 887162#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 887163#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 887184#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 887155#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 887166#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 887167#L1966-5 assume !(1 == ~currentHeading~0); 887267#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 887268#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 890921#L1982-11 assume { :end_inline_continueInDirection } true; 890917#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 890916#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 890914#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 890912#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 890893#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 890889#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 890886#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 890884#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 890883#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 890881#L3022-2 [2022-07-13 04:04:39,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:39,079 INFO L85 PathProgramCache]: Analyzing trace with hash 2039265788, now seen corresponding path program 1 times [2022-07-13 04:04:39,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:39,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1545935857] [2022-07-13 04:04:39,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:39,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:39,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:39,104 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:39,104 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:39,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1545935857] [2022-07-13 04:04:39,104 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1545935857] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:39,104 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:39,104 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:39,104 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [732505987] [2022-07-13 04:04:39,104 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:39,105 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:39,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:39,105 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 1 times [2022-07-13 04:04:39,105 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:39,105 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [753270868] [2022-07-13 04:04:39,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:39,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:39,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:39,130 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:39,130 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:39,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [753270868] [2022-07-13 04:04:39,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [753270868] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:39,130 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:39,130 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:39,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [128981892] [2022-07-13 04:04:39,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:39,131 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:39,131 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:39,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:39,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:39,132 INFO L87 Difference]: Start difference. First operand 29492 states and 54252 transitions. cyclomatic complexity: 24761 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:39,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:39,580 INFO L93 Difference]: Finished difference Result 117578 states and 216378 transitions. [2022-07-13 04:04:39,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:39,580 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 117578 states and 216378 transitions. [2022-07-13 04:04:40,399 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 105024 [2022-07-13 04:04:40,696 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 117578 states to 117578 states and 216378 transitions. [2022-07-13 04:04:40,696 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117578 [2022-07-13 04:04:40,900 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117578 [2022-07-13 04:04:40,901 INFO L73 IsDeterministic]: Start isDeterministic. Operand 117578 states and 216378 transitions. [2022-07-13 04:04:40,975 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:40,975 INFO L369 hiAutomatonCegarLoop]: Abstraction has 117578 states and 216378 transitions. [2022-07-13 04:04:41,040 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117578 states and 216378 transitions. [2022-07-13 04:04:41,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117578 to 29492. [2022-07-13 04:04:41,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29492 states, 29492 states have (on average 1.8394140783941408) internal successors, (54248), 29491 states have internal predecessors, (54248), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:41,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29492 states to 29492 states and 54248 transitions. [2022-07-13 04:04:41,720 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29492 states and 54248 transitions. [2022-07-13 04:04:41,720 INFO L374 stractBuchiCegarLoop]: Abstraction has 29492 states and 54248 transitions. [2022-07-13 04:04:41,720 INFO L287 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-07-13 04:04:41,720 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29492 states and 54248 transitions. [2022-07-13 04:04:41,779 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:41,779 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:41,779 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:41,781 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:41,781 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:41,782 INFO L752 eck$LassoCheckResult]: Stem: 1032061#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1032062#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1031359#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1031360#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1031877#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1031878#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1032754#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1032755#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1033055#L3272 assume !(0 == getOrigin_~person#1); 1033056#L3276 assume !(1 == getOrigin_~person#1); 1032014#L3280 assume !(2 == getOrigin_~person#1); 1032015#L3284 assume !(3 == getOrigin_~person#1); 1033012#L3288 assume !(4 == getOrigin_~person#1); 1033515#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1032184#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1032185#L414 assume !(0 == initPersonOnFloor_~floor#1); 1031134#L441 assume !(1 == initPersonOnFloor_~floor#1); 1031136#L468 assume !(2 == initPersonOnFloor_~floor#1); 1031863#L495 assume !(3 == initPersonOnFloor_~floor#1); 1032491#L522 assume !(4 == initPersonOnFloor_~floor#1); 1031217#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1032130#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1032029#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1032153#L206 assume !(0 == callOnFloor_~floorID#1); 1032154#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1032378#L218-2 assume { :end_inline_callOnFloor } true; 1033275#L558 assume { :end_inline_initPersonOnFloor } true; 1033276#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1032557#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1032328#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1031965#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1031966#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1032827#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1032828#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1033676#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1033662#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1033660#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1033656#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1033655#L206-2 assume !(0 == callOnFloor_~floorID#1); 1033654#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1033650#L218-5 assume { :end_inline_callOnFloor } true; 1033649#L558-1 assume { :end_inline_initPersonOnFloor } true; 1033648#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1033647#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1033646#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1033645#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1032686#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1032687#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1032709#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1032711#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1033642#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1032842#L2239 assume !(1 == ~doorState~0); 1031293#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1031294#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1031625#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1031626#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1033151#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1031742#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1031744#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1033643#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1031745#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1031341#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1032198#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1033401#L1966-2 assume !(1 == ~currentHeading~0); 1033406#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1033331#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1033332#L1982-5 assume { :end_inline_continueInDirection } true; 1031608#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1031702#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1031703#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1031083#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1031084#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1033206#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1032688#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1031320#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1032314#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1032406#L3022-2 [2022-07-13 04:04:41,782 INFO L754 eck$LassoCheckResult]: Loop: 1032406#L3022-2 assume !false; 1040775#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1040771#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1040772#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1040767#L3030 assume 1 != cleanup_~tmp___0~9#1; 1040768#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1040763#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1040764#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1040758#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1040759#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1040752#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1040753#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1047649#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1040721#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1040717#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1040712#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1040713#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1044075#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1044076#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1047632#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1052359#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1052360#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1052365#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1052361#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1052358#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1052356#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1052355#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1033983#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1033982#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1033979#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1033980#L1759-2 assume !(0 == ~currentFloorID~0); 1036726#L1765-2 assume ~currentFloorID~0 > 0; 1036107#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1036106#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1033975#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1033976#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1035908#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1035899#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1035892#L1966-3 assume !(1 == ~currentHeading~0); 1035885#L1976-9 assume !(0 == ~currentFloorID~0); 1035875#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1035870#L1982-7 assume { :end_inline_continueInDirection } true; 1035871#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1040619#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1040616#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1040617#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1040618#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1040608#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1040602#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1040601#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1040600#L3022-2 assume !false; 1040599#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1040598#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1040597#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1040596#L3030 assume 1 != cleanup_~tmp___0~9#1; 1040595#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1040594#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1040593#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1040554#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1040555#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1040699#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1034095#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1034081#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1034082#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1034065#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1034066#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1034061#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1034062#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1034059#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1034058#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1034057#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1034056#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1034054#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1034053#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1034051#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1032068#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1032069#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1033330#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1033521#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1031721#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1031722#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1032699#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1033124#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1040009#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1033226#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1033227#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1040011#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1040010#L1966-5 assume !(1 == ~currentHeading~0); 1040008#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1031357#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1031358#L1982-11 assume { :end_inline_continueInDirection } true; 1032358#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1045894#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1045891#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1045888#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1045886#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1047558#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1047557#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1040778#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1040779#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1032406#L3022-2 [2022-07-13 04:04:41,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:41,782 INFO L85 PathProgramCache]: Analyzing trace with hash -2088946052, now seen corresponding path program 1 times [2022-07-13 04:04:41,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:41,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809160417] [2022-07-13 04:04:41,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:41,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:41,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:41,814 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:41,814 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:41,814 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809160417] [2022-07-13 04:04:41,814 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809160417] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:41,814 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:41,815 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:41,815 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377415727] [2022-07-13 04:04:41,815 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:41,816 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:41,816 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:41,817 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 2 times [2022-07-13 04:04:41,817 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:41,817 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [831530465] [2022-07-13 04:04:41,817 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:41,817 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:41,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:41,845 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:41,846 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:41,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [831530465] [2022-07-13 04:04:41,846 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [831530465] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:41,848 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:41,848 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:41,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [445445484] [2022-07-13 04:04:41,848 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:41,849 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:41,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:41,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:41,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:41,849 INFO L87 Difference]: Start difference. First operand 29492 states and 54248 transitions. cyclomatic complexity: 24757 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:42,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:42,110 INFO L93 Difference]: Finished difference Result 88173 states and 162260 transitions. [2022-07-13 04:04:42,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:42,110 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 88173 states and 162260 transitions. [2022-07-13 04:04:42,597 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 78768 [2022-07-13 04:04:42,843 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 88173 states to 88173 states and 162260 transitions. [2022-07-13 04:04:42,843 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 88173 [2022-07-13 04:04:43,063 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 88173 [2022-07-13 04:04:43,063 INFO L73 IsDeterministic]: Start isDeterministic. Operand 88173 states and 162260 transitions. [2022-07-13 04:04:43,100 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:43,100 INFO L369 hiAutomatonCegarLoop]: Abstraction has 88173 states and 162260 transitions. [2022-07-13 04:04:43,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88173 states and 162260 transitions. [2022-07-13 04:04:43,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88173 to 29477. [2022-07-13 04:04:43,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29477 states, 29477 states have (on average 1.8394002103334803) internal successors, (54220), 29476 states have internal predecessors, (54220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:43,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29477 states to 29477 states and 54220 transitions. [2022-07-13 04:04:43,512 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29477 states and 54220 transitions. [2022-07-13 04:04:43,512 INFO L374 stractBuchiCegarLoop]: Abstraction has 29477 states and 54220 transitions. [2022-07-13 04:04:43,512 INFO L287 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-07-13 04:04:43,512 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29477 states and 54220 transitions. [2022-07-13 04:04:43,662 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:43,663 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:43,663 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:43,666 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:43,666 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:43,666 INFO L752 eck$LassoCheckResult]: Stem: 1149738#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1149739#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1149033#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1149034#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1149550#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1149551#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1150415#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1150416#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1150710#L3272 assume !(0 == getOrigin_~person#1); 1150711#L3276 assume !(1 == getOrigin_~person#1); 1149690#L3280 assume !(2 == getOrigin_~person#1); 1149691#L3284 assume !(3 == getOrigin_~person#1); 1150672#L3288 assume !(4 == getOrigin_~person#1); 1151153#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1149857#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1149858#L414 assume !(0 == initPersonOnFloor_~floor#1); 1148813#L441 assume 1 == initPersonOnFloor_~floor#1; 1148814#L442 assume !(0 == initPersonOnFloor_~person#1); 1149377#L445 assume !(1 == initPersonOnFloor_~person#1); 1149378#L448 assume !(2 == initPersonOnFloor_~person#1); 1149028#L451 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 1149029#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1149806#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1149706#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1149829#L206 assume !(0 == callOnFloor_~floorID#1); 1149830#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1150051#L218-2 assume { :end_inline_callOnFloor } true; 1151327#L558 assume { :end_inline_initPersonOnFloor } true; 1151326#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1151325#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1151323#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1151329#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1151316#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1150488#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1150489#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1151310#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1151296#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1151294#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1151290#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1151289#L206-2 assume !(0 == callOnFloor_~floorID#1); 1151288#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1151284#L218-5 assume { :end_inline_callOnFloor } true; 1151283#L558-1 assume { :end_inline_initPersonOnFloor } true; 1151282#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1151281#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1151280#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1151279#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1150348#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1150349#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1150372#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1150374#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1151276#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1150502#L2239 assume !(1 == ~doorState~0); 1148967#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1148968#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1149299#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1149300#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1150799#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1149416#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1149418#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1151277#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1149419#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1149015#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1149871#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1151037#L1966-2 assume !(1 == ~currentHeading~0); 1151046#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1150976#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1150977#L1982-5 assume { :end_inline_continueInDirection } true; 1149282#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1149375#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1149376#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1151144#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1157577#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1157575#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1157569#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1157562#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1157561#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1157557#L3022-2 [2022-07-13 04:04:43,666 INFO L754 eck$LassoCheckResult]: Loop: 1157557#L3022-2 assume !false; 1157558#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1157553#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1157554#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1157549#L3030 assume 1 != cleanup_~tmp___0~9#1; 1157550#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1157543#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1157544#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1157531#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1157532#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1165355#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1157514#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1157511#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1157497#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1157493#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1157488#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1157489#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1165007#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1165008#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1165335#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1173776#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1173777#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1173783#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1173779#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1173778#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1173775#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1173772#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1151717#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1151711#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1151712#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1151707#L1759-2 assume !(0 == ~currentFloorID~0); 1151708#L1765-2 assume ~currentFloorID~0 > 0; 1154021#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1154019#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1151145#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1151146#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1153848#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1153839#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1153832#L1966-3 assume !(1 == ~currentHeading~0); 1153825#L1976-9 assume !(0 == ~currentFloorID~0); 1153815#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1153810#L1982-7 assume { :end_inline_continueInDirection } true; 1153811#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1157485#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1157483#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1157484#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1153801#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1153802#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1157467#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1157466#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1157465#L3022-2 assume !false; 1157464#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1157463#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1157462#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1157461#L3030 assume 1 != cleanup_~tmp___0~9#1; 1157460#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1157459#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1157458#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1157457#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1157456#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1157455#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1151831#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1151819#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1151820#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1151803#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1151804#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1151798#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1151799#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1151796#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1151795#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1151794#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1151793#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1151791#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1151790#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1151788#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1149745#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1149746#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1150975#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1151158#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1151180#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1150362#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1150363#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1150773#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1157432#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1150873#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1150874#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1161304#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1161302#L1966-5 assume !(1 == ~currentHeading~0); 1161299#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1161297#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1161287#L1982-11 assume { :end_inline_continueInDirection } true; 1161284#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1161285#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1157915#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1157916#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165313#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1157909#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1157908#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1157578#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1157579#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1157557#L3022-2 [2022-07-13 04:04:43,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:43,667 INFO L85 PathProgramCache]: Analyzing trace with hash -434391940, now seen corresponding path program 1 times [2022-07-13 04:04:43,667 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:43,667 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1690005125] [2022-07-13 04:04:43,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:43,668 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:43,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:43,689 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:43,689 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:43,690 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1690005125] [2022-07-13 04:04:43,690 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1690005125] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:43,690 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:43,690 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:43,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [887528710] [2022-07-13 04:04:43,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:43,690 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:43,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:43,691 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 3 times [2022-07-13 04:04:43,691 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:43,691 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319693300] [2022-07-13 04:04:43,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:43,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:43,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:43,716 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:43,716 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:43,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319693300] [2022-07-13 04:04:43,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1319693300] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:43,717 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:43,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:43,717 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768329801] [2022-07-13 04:04:43,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:43,717 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:43,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:43,718 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:43,718 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:43,718 INFO L87 Difference]: Start difference. First operand 29477 states and 54220 transitions. cyclomatic complexity: 24744 Second operand has 4 states, 4 states have (on average 19.25) internal successors, (77), 4 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:43,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:43,976 INFO L93 Difference]: Finished difference Result 58837 states and 108243 transitions. [2022-07-13 04:04:43,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:43,977 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58837 states and 108243 transitions. [2022-07-13 04:04:44,234 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-13 04:04:44,597 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58837 states to 58837 states and 108243 transitions. [2022-07-13 04:04:44,598 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58837 [2022-07-13 04:04:44,643 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58837 [2022-07-13 04:04:44,643 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58837 states and 108243 transitions. [2022-07-13 04:04:44,680 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:44,680 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58837 states and 108243 transitions. [2022-07-13 04:04:44,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58837 states and 108243 transitions. [2022-07-13 04:04:45,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58837 to 29477. [2022-07-13 04:04:45,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29477 states, 29477 states have (on average 1.8390270380296503) internal successors, (54209), 29476 states have internal predecessors, (54209), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:45,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29477 states to 29477 states and 54209 transitions. [2022-07-13 04:04:45,254 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29477 states and 54209 transitions. [2022-07-13 04:04:45,254 INFO L374 stractBuchiCegarLoop]: Abstraction has 29477 states and 54209 transitions. [2022-07-13 04:04:45,254 INFO L287 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2022-07-13 04:04:45,254 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29477 states and 54209 transitions. [2022-07-13 04:04:45,341 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:45,341 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:45,341 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:45,348 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:45,348 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:45,348 INFO L752 eck$LassoCheckResult]: Stem: 1238063#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1238064#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1237359#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1237360#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1237877#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1237878#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1238762#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1238763#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1239066#L3272 assume !(0 == getOrigin_~person#1); 1239067#L3276 assume !(1 == getOrigin_~person#1); 1238017#L3280 assume !(2 == getOrigin_~person#1); 1238018#L3284 assume !(3 == getOrigin_~person#1); 1239023#L3288 assume !(4 == getOrigin_~person#1); 1239527#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1238184#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1238185#L414 assume !(0 == initPersonOnFloor_~floor#1); 1237146#L441 assume 1 == initPersonOnFloor_~floor#1; 1237147#L442 assume !(0 == initPersonOnFloor_~person#1); 1237710#L445 assume !(1 == initPersonOnFloor_~person#1); 1237711#L448 assume !(2 == initPersonOnFloor_~person#1); 1237357#L451 assume !(3 == initPersonOnFloor_~person#1); 1237358#L454 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1237396#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1238132#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1238031#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1238155#L206 assume !(0 == callOnFloor_~floorID#1); 1238157#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1237107#L218-2 assume { :end_inline_callOnFloor } true; 1237108#L558 assume { :end_inline_initPersonOnFloor } true; 1239175#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1239176#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1239699#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1239697#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1239696#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1239459#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1239702#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1239690#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1239683#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1239681#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1239677#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1239676#L206-2 assume !(0 == callOnFloor_~floorID#1); 1239675#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1239671#L218-5 assume { :end_inline_callOnFloor } true; 1239670#L558-1 assume { :end_inline_initPersonOnFloor } true; 1239669#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1239668#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1239667#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1239666#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1238687#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1238688#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1238714#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1238716#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1239658#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1238852#L2239 assume !(1 == ~doorState~0); 1237294#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1237295#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1237626#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1237627#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1239154#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1237746#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1237748#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1239659#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1237749#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1237342#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1238200#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1239405#L1966-2 assume !(1 == ~currentHeading~0); 1239411#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1239333#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1239334#L1982-5 assume { :end_inline_continueInDirection } true; 1237609#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1237705#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1237706#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1237090#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1237091#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1239209#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1238690#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1237321#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1238407#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1238408#L3022-2 [2022-07-13 04:04:45,348 INFO L754 eck$LassoCheckResult]: Loop: 1238408#L3022-2 assume !false; 1253537#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1253533#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1253534#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1253529#L3030 assume 1 != cleanup_~tmp___0~9#1; 1253530#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1253523#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1253524#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1246776#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1246777#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1259492#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1259491#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1259487#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1259469#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1259464#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1259463#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1259462#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1259461#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1259460#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1259453#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1259449#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1259450#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1259457#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1259452#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1259451#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1259448#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1259445#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1242585#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1242584#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1242582#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1242581#L1759-2 assume !(0 == ~currentFloorID~0); 1242580#L1765-2 assume ~currentFloorID~0 > 0; 1242579#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1242578#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1242577#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1242576#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1242563#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1242481#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1242479#L1966-3 assume !(1 == ~currentHeading~0); 1242478#L1976-9 assume !(0 == ~currentFloorID~0); 1242476#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1242471#L1982-7 assume { :end_inline_continueInDirection } true; 1242472#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1246644#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1246643#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1246642#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1246641#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1240580#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1240576#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1240538#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1240539#L3022-2 assume !false; 1240534#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1240535#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1240530#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1240531#L3030 assume 1 != cleanup_~tmp___0~9#1; 1240526#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1240527#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1240522#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1240523#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1246586#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1240506#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1240507#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1240487#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1240488#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1240471#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1240472#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1240467#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1240468#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1240465#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1240464#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1240463#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1240462#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1240460#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1240459#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1240457#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1238071#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1238072#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1239332#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1239530#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1239553#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1238701#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1238702#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1239129#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1240241#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1239229#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1239230#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1240259#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1240260#L1966-5 assume !(1 == ~currentHeading~0); 1246329#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1237355#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1237356#L1982-11 assume { :end_inline_continueInDirection } true; 1238361#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1253572#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1253568#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253569#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253611#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253555#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253554#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253540#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1253541#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1238408#L3022-2 [2022-07-13 04:04:45,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:45,349 INFO L85 PathProgramCache]: Analyzing trace with hash -951044351, now seen corresponding path program 1 times [2022-07-13 04:04:45,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:45,349 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2028221710] [2022-07-13 04:04:45,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:45,349 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:45,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:45,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:45,382 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:45,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2028221710] [2022-07-13 04:04:45,383 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2028221710] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:45,383 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:45,383 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:45,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1284512014] [2022-07-13 04:04:45,383 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:45,383 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:45,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:45,384 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 4 times [2022-07-13 04:04:45,384 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:45,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1785623] [2022-07-13 04:04:45,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:45,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:45,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:45,411 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:45,412 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:45,412 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1785623] [2022-07-13 04:04:45,412 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1785623] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:45,412 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:45,412 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:45,412 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [487918030] [2022-07-13 04:04:45,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:45,413 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:45,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:45,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:45,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:45,414 INFO L87 Difference]: Start difference. First operand 29477 states and 54209 transitions. cyclomatic complexity: 24733 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:45,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:45,713 INFO L93 Difference]: Finished difference Result 58837 states and 108230 transitions. [2022-07-13 04:04:45,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:45,714 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58837 states and 108230 transitions. [2022-07-13 04:04:46,122 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-13 04:04:46,271 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58837 states to 58837 states and 108230 transitions. [2022-07-13 04:04:46,271 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58837 [2022-07-13 04:04:46,313 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58837 [2022-07-13 04:04:46,313 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58837 states and 108230 transitions. [2022-07-13 04:04:46,348 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:46,348 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58837 states and 108230 transitions. [2022-07-13 04:04:46,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58837 states and 108230 transitions. [2022-07-13 04:04:46,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58837 to 29477. [2022-07-13 04:04:46,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29477 states, 29477 states have (on average 1.8386538657258202) internal successors, (54198), 29476 states have internal predecessors, (54198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:46,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29477 states to 29477 states and 54198 transitions. [2022-07-13 04:04:46,918 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29477 states and 54198 transitions. [2022-07-13 04:04:46,918 INFO L374 stractBuchiCegarLoop]: Abstraction has 29477 states and 54198 transitions. [2022-07-13 04:04:46,918 INFO L287 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2022-07-13 04:04:46,918 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29477 states and 54198 transitions. [2022-07-13 04:04:46,986 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:46,986 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:46,986 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:46,989 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:46,990 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:46,990 INFO L752 eck$LassoCheckResult]: Stem: 1326395#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1326396#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1325688#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1325689#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1326207#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1326208#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1327082#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1327083#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1327378#L3272 assume !(0 == getOrigin_~person#1); 1327379#L3276 assume !(1 == getOrigin_~person#1); 1326348#L3280 assume !(2 == getOrigin_~person#1); 1326349#L3284 assume !(3 == getOrigin_~person#1); 1327336#L3288 assume !(4 == getOrigin_~person#1); 1327830#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1326513#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1326514#L414 assume !(0 == initPersonOnFloor_~floor#1); 1325469#L441 assume 1 == initPersonOnFloor_~floor#1; 1325470#L442 assume !(0 == initPersonOnFloor_~person#1); 1326038#L445 assume !(1 == initPersonOnFloor_~person#1); 1326039#L448 assume !(2 == initPersonOnFloor_~person#1); 1325684#L451 assume !(3 == initPersonOnFloor_~person#1); 1325685#L454 assume !(4 == initPersonOnFloor_~person#1); 1325724#L457 assume !(5 == initPersonOnFloor_~person#1); 1325725#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1326463#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1326363#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1326485#L206 assume !(0 == callOnFloor_~floorID#1); 1326487#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1325435#L218-2 assume { :end_inline_callOnFloor } true; 1325436#L558 assume { :end_inline_initPersonOnFloor } true; 1327487#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1327488#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1327997#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1327995#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1327994#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1327770#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1328001#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1327985#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1327980#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1327978#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1327974#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1327973#L206-2 assume !(0 == callOnFloor_~floorID#1); 1327972#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1327968#L218-5 assume { :end_inline_callOnFloor } true; 1327967#L558-1 assume { :end_inline_initPersonOnFloor } true; 1327966#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1327965#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1327964#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1327963#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1327015#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1327016#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1327037#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1327039#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1327954#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1327165#L2239 assume !(1 == ~doorState~0); 1325623#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1325624#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1325956#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1325957#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1327467#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1326074#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1326076#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1327956#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1326077#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1325671#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1326527#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1327717#L1966-2 assume !(1 == ~currentHeading~0); 1327726#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1327652#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1327653#L1982-5 assume { :end_inline_continueInDirection } true; 1325942#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1326033#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1326034#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1327821#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1334721#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1334720#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1334717#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1334710#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1326738#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1326739#L3022-2 [2022-07-13 04:04:46,990 INFO L754 eck$LassoCheckResult]: Loop: 1326739#L3022-2 assume !false; 1335163#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1335162#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1335161#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1335160#L3030 assume 1 != cleanup_~tmp___0~9#1; 1335159#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1335158#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1335157#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1335155#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1335156#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1347498#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1348047#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1342239#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1342107#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1342102#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1342101#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1342100#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1339869#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1339867#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1339860#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1339857#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1339858#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1339864#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1339859#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1339856#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1339854#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1339853#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1330712#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1330711#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1330709#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1330708#L1759-2 assume !(0 == ~currentFloorID~0); 1330707#L1765-2 assume ~currentFloorID~0 > 0; 1330706#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1325703#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1325704#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1330473#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1330522#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1330514#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1330506#L1966-3 assume !(1 == ~currentHeading~0); 1330499#L1976-9 assume !(0 == ~currentFloorID~0); 1330489#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1330484#L1982-7 assume { :end_inline_continueInDirection } true; 1330485#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1335025#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1335022#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1335023#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1335024#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1328535#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1328531#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1328492#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1328493#L3022-2 assume !false; 1328488#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1328489#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1328484#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1328485#L3030 assume 1 != cleanup_~tmp___0~9#1; 1328480#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1328481#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1328476#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1328477#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1335005#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1328463#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1328464#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1328443#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1328444#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1328427#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1328428#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1328423#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1328424#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1328421#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1328420#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1328419#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1328418#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1328416#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1328415#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1328414#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1328413#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1328412#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1328411#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1327861#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1327862#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1329781#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1329779#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1329580#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1329263#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1327540#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1327541#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1334584#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1327069#L1966-5 assume !(1 == ~currentHeading~0); 1327071#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1334854#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1327911#L1982-11 assume { :end_inline_continueInDirection } true; 1326690#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1335183#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1335182#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335181#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335173#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335169#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335166#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335165#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1335164#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1326739#L3022-2 [2022-07-13 04:04:46,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:46,991 INFO L85 PathProgramCache]: Analyzing trace with hash 330843171, now seen corresponding path program 1 times [2022-07-13 04:04:46,991 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:46,991 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [918814500] [2022-07-13 04:04:46,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:46,991 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:46,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:47,009 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:47,009 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:47,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [918814500] [2022-07-13 04:04:47,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [918814500] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:47,010 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:47,010 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:47,010 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [167484336] [2022-07-13 04:04:47,010 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:47,010 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:47,010 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:47,011 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 5 times [2022-07-13 04:04:47,011 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:47,011 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1210485896] [2022-07-13 04:04:47,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:47,011 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:47,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:47,035 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:47,036 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:47,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1210485896] [2022-07-13 04:04:47,036 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1210485896] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:47,036 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:47,036 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:47,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [322989854] [2022-07-13 04:04:47,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:47,037 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:47,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:47,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 04:04:47,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 04:04:47,037 INFO L87 Difference]: Start difference. First operand 29477 states and 54198 transitions. cyclomatic complexity: 24722 Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:47,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:47,245 INFO L93 Difference]: Finished difference Result 58819 states and 108207 transitions. [2022-07-13 04:04:47,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 04:04:47,246 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58819 states and 108207 transitions. [2022-07-13 04:04:47,659 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-13 04:04:47,813 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58819 states to 58819 states and 108207 transitions. [2022-07-13 04:04:47,813 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58819 [2022-07-13 04:04:47,856 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58819 [2022-07-13 04:04:47,856 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58819 states and 108207 transitions. [2022-07-13 04:04:47,892 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:47,892 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58819 states and 108207 transitions. [2022-07-13 04:04:47,921 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58819 states and 108207 transitions. [2022-07-13 04:04:48,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58819 to 29477. [2022-07-13 04:04:48,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29477 states, 29477 states have (on average 1.8386199409709265) internal successors, (54197), 29476 states have internal predecessors, (54197), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:48,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29477 states to 29477 states and 54197 transitions. [2022-07-13 04:04:48,469 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29477 states and 54197 transitions. [2022-07-13 04:04:48,469 INFO L374 stractBuchiCegarLoop]: Abstraction has 29477 states and 54197 transitions. [2022-07-13 04:04:48,469 INFO L287 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2022-07-13 04:04:48,469 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29477 states and 54197 transitions. [2022-07-13 04:04:48,548 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:48,548 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:48,548 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:48,552 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:48,552 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:48,553 INFO L752 eck$LassoCheckResult]: Stem: 1414694#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1414695#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1413994#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1413995#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1414508#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1414509#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1415374#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1415375#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1415665#L3272 assume !(0 == getOrigin_~person#1); 1415666#L3276 assume !(1 == getOrigin_~person#1); 1414646#L3280 assume !(2 == getOrigin_~person#1); 1414647#L3284 assume !(3 == getOrigin_~person#1); 1415624#L3288 assume !(4 == getOrigin_~person#1); 1416081#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1414812#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1414813#L414 assume !(0 == initPersonOnFloor_~floor#1); 1413776#L441 assume 1 == initPersonOnFloor_~floor#1; 1413777#L442 assume !(0 == initPersonOnFloor_~person#1); 1414341#L445 assume !(1 == initPersonOnFloor_~person#1); 1414342#L448 assume !(2 == initPersonOnFloor_~person#1); 1413990#L451 assume !(3 == initPersonOnFloor_~person#1); 1413991#L454 assume !(4 == initPersonOnFloor_~person#1); 1414030#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1414031#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1414761#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1414662#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1414783#L206 assume !(0 == callOnFloor_~floorID#1); 1414785#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1413742#L218-2 assume { :end_inline_callOnFloor } true; 1413743#L558 assume { :end_inline_initPersonOnFloor } true; 1415760#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1415761#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1416241#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1416238#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1416236#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1415446#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1415432#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1415433#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1416225#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1416223#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1416219#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1416218#L206-2 assume !(0 == callOnFloor_~floorID#1); 1416217#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1416213#L218-5 assume { :end_inline_callOnFloor } true; 1416212#L558-1 assume { :end_inline_initPersonOnFloor } true; 1416211#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416210#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416209#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1416208#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1415306#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1415307#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1415330#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1415332#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1416199#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1415459#L2239 assume !(1 == ~doorState~0); 1413929#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1413930#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1414262#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1414263#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1415742#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1414379#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1414381#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1416201#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1414382#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1413977#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1414826#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1415973#L1966-2 assume !(1 == ~currentHeading~0); 1415978#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1415914#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1415915#L1982-5 assume { :end_inline_continueInDirection } true; 1414245#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1414339#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1414340#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1413725#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1413726#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1415793#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1415309#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1413956#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1414940#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1415029#L3022-2 [2022-07-13 04:04:48,553 INFO L754 eck$LassoCheckResult]: Loop: 1415029#L3022-2 assume !false; 1423314#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1423313#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1423312#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1423311#L3030 assume 1 != cleanup_~tmp___0~9#1; 1423310#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1423309#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1423308#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1423306#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1423304#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1423303#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1423302#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1423299#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1423270#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1423266#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1423231#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1423232#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1423201#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1423202#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1430110#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1436781#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1436782#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1436794#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1436785#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1436783#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1436774#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1436767#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1419199#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1419197#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1419195#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1416484#L1759-2 assume !(0 == ~currentFloorID~0); 1416485#L1765-2 assume ~currentFloorID~0 > 0; 1416540#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416541#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416072#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1416073#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1418735#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1418727#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1418719#L1966-3 assume !(1 == ~currentHeading~0); 1418712#L1976-9 assume !(0 == ~currentFloorID~0); 1418702#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1418696#L1982-7 assume { :end_inline_continueInDirection } true; 1418695#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1418694#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1418692#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1418693#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1418235#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1418236#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1416767#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1416768#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1416732#L3022-2 assume !false; 1416733#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1416728#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1416729#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1416724#L3030 assume 1 != cleanup_~tmp___0~9#1; 1416725#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416720#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416721#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1416715#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1416716#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416709#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1416700#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416697#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1416678#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1416674#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1437004#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1416668#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416669#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416666#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1416665#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1416664#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1416663#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1416661#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1416660#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1416658#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1414701#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1414702#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1415913#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1416086#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1416109#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1415320#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1415321#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1415720#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1417784#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1415814#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1415815#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1416584#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1416585#L1966-5 assume !(1 == ~currentHeading~0); 1423089#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1414891#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1416153#L1982-11 assume { :end_inline_continueInDirection } true; 1414983#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1426671#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1426670#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1426669#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1423327#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1423320#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1423317#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1423316#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1423315#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1415029#L3022-2 [2022-07-13 04:04:48,554 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:48,554 INFO L85 PathProgramCache]: Analyzing trace with hash -930074079, now seen corresponding path program 1 times [2022-07-13 04:04:48,554 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:48,554 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [317597940] [2022-07-13 04:04:48,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:48,554 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:48,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:48,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:48,591 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:48,591 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [317597940] [2022-07-13 04:04:48,592 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [317597940] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:48,592 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:48,592 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:48,592 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [80077471] [2022-07-13 04:04:48,592 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:48,592 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:48,593 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:48,593 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 6 times [2022-07-13 04:04:48,593 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:48,593 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [503182669] [2022-07-13 04:04:48,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:48,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:48,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:48,622 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:48,623 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:48,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [503182669] [2022-07-13 04:04:48,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [503182669] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:48,623 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:48,623 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:48,623 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1032602102] [2022-07-13 04:04:48,624 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:48,624 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:48,624 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:48,624 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 04:04:48,624 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 04:04:48,625 INFO L87 Difference]: Start difference. First operand 29477 states and 54197 transitions. cyclomatic complexity: 24721 Second operand has 7 states, 7 states have (on average 11.285714285714286) internal successors, (79), 7 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:49,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:49,463 INFO L93 Difference]: Finished difference Result 117547 states and 216280 transitions. [2022-07-13 04:04:49,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 04:04:49,463 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 117547 states and 216280 transitions. [2022-07-13 04:04:49,902 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 105024 [2022-07-13 04:04:50,227 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 117547 states to 117547 states and 216280 transitions. [2022-07-13 04:04:50,227 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117547 [2022-07-13 04:04:50,298 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117547 [2022-07-13 04:04:50,298 INFO L73 IsDeterministic]: Start isDeterministic. Operand 117547 states and 216280 transitions. [2022-07-13 04:04:50,607 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:50,607 INFO L369 hiAutomatonCegarLoop]: Abstraction has 117547 states and 216280 transitions. [2022-07-13 04:04:50,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117547 states and 216280 transitions. [2022-07-13 04:04:51,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117547 to 29481. [2022-07-13 04:04:51,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29481 states, 29481 states have (on average 1.838472236355619) internal successors, (54200), 29480 states have internal predecessors, (54200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:51,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29481 states to 29481 states and 54200 transitions. [2022-07-13 04:04:51,167 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29481 states and 54200 transitions. [2022-07-13 04:04:51,168 INFO L374 stractBuchiCegarLoop]: Abstraction has 29481 states and 54200 transitions. [2022-07-13 04:04:51,168 INFO L287 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2022-07-13 04:04:51,168 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29481 states and 54200 transitions. [2022-07-13 04:04:51,244 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:51,244 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:51,244 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:51,247 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:51,247 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:51,247 INFO L752 eck$LassoCheckResult]: Stem: 1561751#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1561752#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1561047#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1561048#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1561562#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1561563#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1562446#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1562447#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1562745#L3272 assume !(0 == getOrigin_~person#1); 1562746#L3276 assume !(1 == getOrigin_~person#1); 1561704#L3280 assume !(2 == getOrigin_~person#1); 1561705#L3284 assume !(3 == getOrigin_~person#1); 1562704#L3288 assume !(4 == getOrigin_~person#1); 1563175#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1561869#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1561870#L414 assume !(0 == initPersonOnFloor_~floor#1); 1560828#L441 assume 1 == initPersonOnFloor_~floor#1; 1560829#L442 assume !(0 == initPersonOnFloor_~person#1); 1561394#L445 assume !(1 == initPersonOnFloor_~person#1); 1561395#L448 assume !(2 == initPersonOnFloor_~person#1); 1561043#L451 assume !(3 == initPersonOnFloor_~person#1); 1561044#L454 assume !(4 == initPersonOnFloor_~person#1); 1561083#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1561084#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1561819#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1561718#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1561719#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1561841#L206 assume !(0 == callOnFloor_~floorID#1); 1561842#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1562066#L218-2 assume { :end_inline_callOnFloor } true; 1562946#L558 assume { :end_inline_initPersonOnFloor } true; 1562947#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1562246#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1562014#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1561655#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1561656#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1562520#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1562506#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1562507#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1563310#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1563309#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1563304#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1563299#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1563298#L206-2 assume !(0 == callOnFloor_~floorID#1); 1563297#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1563293#L218-5 assume { :end_inline_callOnFloor } true; 1563292#L558-1 assume { :end_inline_initPersonOnFloor } true; 1563291#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1563290#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1563289#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1563288#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1562376#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1562377#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1562400#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1562402#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1563285#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1562535#L2239 assume !(1 == ~doorState~0); 1560982#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1560983#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1561315#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1561316#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1562831#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1561432#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1561434#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1563286#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1561435#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1561030#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1561883#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1563058#L1966-2 assume !(1 == ~currentHeading~0); 1563066#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1563000#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1563001#L1982-5 assume { :end_inline_continueInDirection } true; 1561298#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1563737#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1563164#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1563165#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1562881#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1562882#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1562380#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1561009#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1562001#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1562094#L3022-2 [2022-07-13 04:04:51,247 INFO L754 eck$LassoCheckResult]: Loop: 1562094#L3022-2 assume !false; 1570468#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1570467#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1570466#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1570465#L3030 assume 1 != cleanup_~tmp___0~9#1; 1570464#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1570463#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1570462#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1570460#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1570458#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1570459#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1576817#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1576811#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1576567#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1576562#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1576561#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1576560#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1576559#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1576558#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1576551#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1576547#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1576548#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1576555#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1576550#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1576549#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1576546#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1576543#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1566125#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1566122#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1566109#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1566110#L1759-2 assume !(0 == ~currentFloorID~0); 1566127#L1765-2 assume ~currentFloorID~0 > 0; 1566123#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1566121#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1566120#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1566087#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1565979#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1565980#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1566171#L1966-3 assume !(1 == ~currentHeading~0); 1566168#L1976-9 assume !(0 == ~currentFloorID~0); 1566156#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1565780#L1982-7 assume { :end_inline_continueInDirection } true; 1565781#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1570343#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1570340#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1570341#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1570342#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1565756#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1565752#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1563827#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1563828#L3022-2 assume !false; 1563822#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1563823#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1563818#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1563819#L3030 assume 1 != cleanup_~tmp___0~9#1; 1563814#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1563815#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1563810#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1563811#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1570321#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1570354#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1563789#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1563775#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1563776#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1563759#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1563760#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1563755#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1563756#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1563753#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1563752#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1563751#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1563750#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1563748#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1563747#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1563745#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1561758#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1561759#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1562999#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1563179#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1563199#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1568582#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1562805#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1562807#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1568056#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1562900#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1562901#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1570114#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1570115#L1966-5 assume !(1 == ~currentHeading~0); 1570231#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1561950#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1563243#L1982-11 assume { :end_inline_continueInDirection } true; 1562047#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1570488#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1570487#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1570486#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1570485#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1570483#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1570477#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1570470#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1570469#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1562094#L3022-2 [2022-07-13 04:04:51,248 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:51,248 INFO L85 PathProgramCache]: Analyzing trace with hash -2124280855, now seen corresponding path program 1 times [2022-07-13 04:04:51,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:51,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1237739172] [2022-07-13 04:04:51,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:51,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:51,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:51,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:51,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:51,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1237739172] [2022-07-13 04:04:51,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1237739172] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:51,266 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:51,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:51,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [275713981] [2022-07-13 04:04:51,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:51,267 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:51,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:51,267 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 3 times [2022-07-13 04:04:51,267 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:51,267 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [310537996] [2022-07-13 04:04:51,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:51,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:51,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:51,292 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:51,292 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:51,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [310537996] [2022-07-13 04:04:51,293 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [310537996] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:51,293 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:51,293 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:51,293 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [173790734] [2022-07-13 04:04:51,293 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:51,293 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:51,293 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:51,294 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 04:04:51,294 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 04:04:51,294 INFO L87 Difference]: Start difference. First operand 29481 states and 54200 transitions. cyclomatic complexity: 24720 Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:51,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:51,392 INFO L93 Difference]: Finished difference Result 29449 states and 54148 transitions. [2022-07-13 04:04:51,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 04:04:51,392 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29449 states and 54148 transitions. [2022-07-13 04:04:51,721 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:51,793 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29449 states to 29449 states and 54148 transitions. [2022-07-13 04:04:51,793 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29449 [2022-07-13 04:04:51,815 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29449 [2022-07-13 04:04:51,815 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29449 states and 54148 transitions. [2022-07-13 04:04:51,833 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:51,833 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29449 states and 54148 transitions. [2022-07-13 04:04:51,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29449 states and 54148 transitions. [2022-07-13 04:04:52,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29449 to 29449. [2022-07-13 04:04:52,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29449 states, 29449 states have (on average 1.8387042004821896) internal successors, (54148), 29448 states have internal predecessors, (54148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:52,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29449 states to 29449 states and 54148 transitions. [2022-07-13 04:04:52,111 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29449 states and 54148 transitions. [2022-07-13 04:04:52,111 INFO L374 stractBuchiCegarLoop]: Abstraction has 29449 states and 54148 transitions. [2022-07-13 04:04:52,111 INFO L287 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2022-07-13 04:04:52,111 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29449 states and 54148 transitions. [2022-07-13 04:04:52,187 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:52,187 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:52,187 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:52,190 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:52,190 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:52,191 INFO L752 eck$LassoCheckResult]: Stem: 1620676#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1620677#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1619984#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1619985#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1620491#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1620492#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1621358#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1621359#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1621652#L3272 assume !(0 == getOrigin_~person#1); 1621653#L3276 assume !(1 == getOrigin_~person#1); 1620629#L3280 assume !(2 == getOrigin_~person#1); 1620630#L3284 assume !(3 == getOrigin_~person#1); 1621612#L3288 assume !(4 == getOrigin_~person#1); 1622075#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1620796#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1620797#L414 assume !(0 == initPersonOnFloor_~floor#1); 1619766#L441 assume 1 == initPersonOnFloor_~floor#1; 1619767#L442 assume !(0 == initPersonOnFloor_~person#1); 1620328#L445 assume !(1 == initPersonOnFloor_~person#1); 1620329#L448 assume !(2 == initPersonOnFloor_~person#1); 1619980#L451 assume !(3 == initPersonOnFloor_~person#1); 1619981#L454 assume !(4 == initPersonOnFloor_~person#1); 1620020#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1620021#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1620745#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1620643#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1620644#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1620768#L206 assume !(0 == callOnFloor_~floorID#1); 1620770#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1619735#L218-2 assume { :end_inline_callOnFloor } true; 1619736#L558 assume { :end_inline_initPersonOnFloor } true; 1622249#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1622248#L3272-1 assume !(0 == getOrigin_~person#1); 1622247#L3276-1 assume !(1 == getOrigin_~person#1); 1622244#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1622243#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1622241#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1622237#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1622236#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1622235#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1622222#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1622215#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1622214#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1622213#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1622209#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1622208#L206-2 assume !(0 == callOnFloor_~floorID#1); 1622207#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1622203#L218-5 assume { :end_inline_callOnFloor } true; 1622202#L558-1 assume { :end_inline_initPersonOnFloor } true; 1622201#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622200#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622199#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1622198#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1621296#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1621297#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1621319#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1621321#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1622194#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1621447#L2239 assume !(1 == ~doorState~0); 1619919#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1619920#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1620250#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1620251#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1621738#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1620364#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1620366#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1622196#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1620367#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1619967#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1620810#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1621967#L1966-2 assume !(1 == ~currentHeading~0); 1621974#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1621907#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1621908#L1982-5 assume { :end_inline_continueInDirection } true; 1620234#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1622331#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1622065#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1622066#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1629155#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1629156#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1621298#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1619946#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1621017#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1621018#L3022-2 [2022-07-13 04:04:52,191 INFO L754 eck$LassoCheckResult]: Loop: 1621018#L3022-2 assume !false; 1629337#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1629338#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1629333#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1629334#L3030 assume 1 != cleanup_~tmp___0~9#1; 1629329#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1629330#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1629325#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1629326#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1629319#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1629321#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1642726#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1642722#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1642708#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1642703#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1642702#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1642701#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1642700#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1642699#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1642693#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1642690#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1642691#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1642697#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1642692#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1642689#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1642687#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1642686#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1623379#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1623378#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1623377#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1623376#L1759-2 assume !(0 == ~currentFloorID~0); 1623375#L1765-2 assume ~currentFloorID~0 > 0; 1623374#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622524#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622525#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1623290#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1623263#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1623116#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1623075#L1966-3 assume !(1 == ~currentHeading~0); 1623047#L1976-9 assume !(0 == ~currentFloorID~0); 1623032#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1623027#L1982-7 assume { :end_inline_continueInDirection } true; 1623024#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623021#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1623020#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1623017#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1623018#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1622995#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1622986#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1622955#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1622952#L3022-2 assume !false; 1622951#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1622950#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1622949#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1622948#L3030 assume 1 != cleanup_~tmp___0~9#1; 1622947#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622946#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622945#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1622943#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1622941#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622936#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1622924#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622912#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1622913#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1622886#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1622887#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1622876#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622877#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622870#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1622869#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1622868#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1622867#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1622865#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1622864#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1622862#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1620683#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1620684#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1621906#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1622082#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1622103#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1622618#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1622616#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1622611#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1622612#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1622831#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1622607#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1622813#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1622814#L1966-5 assume !(1 == ~currentHeading~0); 1629119#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1629120#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1622149#L1982-11 assume { :end_inline_continueInDirection } true; 1620971#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1636142#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1636143#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1636076#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1635994#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1635995#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1629354#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1629346#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1629341#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1621018#L3022-2 [2022-07-13 04:04:52,191 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:52,191 INFO L85 PathProgramCache]: Analyzing trace with hash -1026798450, now seen corresponding path program 1 times [2022-07-13 04:04:52,192 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:52,192 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [675529925] [2022-07-13 04:04:52,192 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:52,192 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:52,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:52,214 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:52,215 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:52,215 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [675529925] [2022-07-13 04:04:52,215 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [675529925] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:52,215 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:52,215 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:04:52,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2089193629] [2022-07-13 04:04:52,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:52,216 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:52,216 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:52,216 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 4 times [2022-07-13 04:04:52,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:52,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [92975826] [2022-07-13 04:04:52,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:52,217 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:52,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:52,247 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:52,248 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:52,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [92975826] [2022-07-13 04:04:52,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [92975826] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:52,248 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:52,248 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:52,248 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495974183] [2022-07-13 04:04:52,248 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:52,248 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:52,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:52,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:04:52,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:04:52,249 INFO L87 Difference]: Start difference. First operand 29449 states and 54148 transitions. cyclomatic complexity: 24700 Second operand has 5 states, 5 states have (on average 16.6) internal successors, (83), 5 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:52,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:52,521 INFO L93 Difference]: Finished difference Result 29437 states and 54130 transitions. [2022-07-13 04:04:52,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:52,521 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29437 states and 54130 transitions. [2022-07-13 04:04:52,632 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:52,710 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29437 states to 29437 states and 54130 transitions. [2022-07-13 04:04:52,710 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29437 [2022-07-13 04:04:52,730 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29437 [2022-07-13 04:04:52,730 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29437 states and 54130 transitions. [2022-07-13 04:04:52,748 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:52,748 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29437 states and 54130 transitions. [2022-07-13 04:04:52,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29437 states and 54130 transitions. [2022-07-13 04:04:52,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29437 to 29437. [2022-07-13 04:04:52,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29437 states, 29437 states have (on average 1.8388422733294834) internal successors, (54130), 29436 states have internal predecessors, (54130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:53,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29437 states to 29437 states and 54130 transitions. [2022-07-13 04:04:53,045 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29437 states and 54130 transitions. [2022-07-13 04:04:53,045 INFO L374 stractBuchiCegarLoop]: Abstraction has 29437 states and 54130 transitions. [2022-07-13 04:04:53,045 INFO L287 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2022-07-13 04:04:53,045 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29437 states and 54130 transitions. [2022-07-13 04:04:53,136 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:53,137 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:53,137 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:53,140 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:53,140 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:53,141 INFO L752 eck$LassoCheckResult]: Stem: 1679584#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1679585#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1678888#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1678889#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1679400#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1679401#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1680261#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1680262#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1680544#L3272 assume !(0 == getOrigin_~person#1); 1680545#L3276 assume !(1 == getOrigin_~person#1); 1679537#L3280 assume !(2 == getOrigin_~person#1); 1679538#L3284 assume !(3 == getOrigin_~person#1); 1680506#L3288 assume !(4 == getOrigin_~person#1); 1680962#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1679699#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1679700#L414 assume !(0 == initPersonOnFloor_~floor#1); 1678669#L441 assume 1 == initPersonOnFloor_~floor#1; 1678670#L442 assume !(0 == initPersonOnFloor_~person#1); 1679232#L445 assume !(1 == initPersonOnFloor_~person#1); 1679233#L448 assume !(2 == initPersonOnFloor_~person#1); 1678884#L451 assume !(3 == initPersonOnFloor_~person#1); 1678885#L454 assume !(4 == initPersonOnFloor_~person#1); 1678924#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1678925#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1679652#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1679551#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1679552#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1679671#L206 assume !(0 == callOnFloor_~floorID#1); 1679673#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1678638#L218-2 assume { :end_inline_callOnFloor } true; 1678639#L558 assume { :end_inline_initPersonOnFloor } true; 1680654#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1680655#L3272-1 assume !(0 == getOrigin_~person#1); 1679697#L3276-1 assume !(1 == getOrigin_~person#1); 1679698#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1681124#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1679489#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1679490#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1680909#L468-1 assume !(2 == initPersonOnFloor_~floor#1); 1678813#L495-1 assume !(3 == initPersonOnFloor_~floor#1); 1678815#L522-2 assume !(4 == initPersonOnFloor_~floor#1); 1679463#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1680463#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1680557#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1681096#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1681095#L206-2 assume !(0 == callOnFloor_~floorID#1); 1681094#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1681090#L218-5 assume { :end_inline_callOnFloor } true; 1681089#L558-1 assume { :end_inline_initPersonOnFloor } true; 1681088#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1681087#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1681086#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1681085#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1680199#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1680200#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1680222#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1680224#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1681082#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1680345#L2239 assume !(1 == ~doorState~0); 1678823#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1678824#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1679153#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1679154#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1680634#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1679271#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1679273#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1681083#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1679274#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1678871#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1679714#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1680864#L1966-2 assume !(1 == ~currentHeading~0); 1680869#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1680801#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1680802#L1982-5 assume { :end_inline_continueInDirection } true; 1679136#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1679230#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1679231#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1678621#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1678622#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1680684#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1680202#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1678850#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1679924#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1679925#L3022-2 [2022-07-13 04:04:53,141 INFO L754 eck$LassoCheckResult]: Loop: 1679925#L3022-2 assume !false; 1688236#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1688232#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1688233#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1688228#L3030 assume 1 != cleanup_~tmp___0~9#1; 1688229#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1688224#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1688225#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1688219#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1688220#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1707327#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1707965#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1707961#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1707723#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1707718#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1707717#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1707716#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1707715#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1707714#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1679073#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1679074#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1679818#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1679079#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1678917#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1678918#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1680631#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1686898#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1686897#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1686896#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1686895#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1686894#L1759-2 assume !(0 == ~currentFloorID~0); 1686893#L1765-2 assume ~currentFloorID~0 > 0; 1686890#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1686891#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1686892#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1686888#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1686889#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1687604#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1687606#L1966-3 assume !(1 == ~currentHeading~0); 1687830#L1976-9 assume !(0 == ~currentFloorID~0); 1687821#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1687817#L1982-7 assume { :end_inline_continueInDirection } true; 1687818#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1688138#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1688137#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1688136#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1688135#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1687789#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1687785#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1687739#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1687740#L3022-2 assume !false; 1687730#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1687731#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1687719#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1687720#L3030 assume 1 != cleanup_~tmp___0~9#1; 1687707#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1687708#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1687642#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1687643#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1681443#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1681441#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1681430#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1681416#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1681417#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1681400#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1681401#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1681396#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1681397#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1681394#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1681393#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1681392#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1681391#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1681389#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1681388#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1681386#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1681385#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1681384#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1681382#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1680992#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1679020#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1679250#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1680608#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1680610#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1687701#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1680705#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1680706#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1687648#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1680250#L1966-5 assume !(1 == ~currentHeading~0); 1680252#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1679782#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1681038#L1982-11 assume { :end_inline_continueInDirection } true; 1679877#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1691659#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1691658#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1691657#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1691656#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1691746#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1691745#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1688239#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1688240#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1679925#L3022-2 [2022-07-13 04:04:53,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:53,141 INFO L85 PathProgramCache]: Analyzing trace with hash 1238935822, now seen corresponding path program 1 times [2022-07-13 04:04:53,141 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:53,142 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [483999745] [2022-07-13 04:04:53,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:53,142 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:53,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:53,165 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:53,166 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:53,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [483999745] [2022-07-13 04:04:53,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [483999745] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:53,166 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:53,166 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:04:53,166 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [108071133] [2022-07-13 04:04:53,166 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:53,168 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:53,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:53,168 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 7 times [2022-07-13 04:04:53,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:53,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1123140954] [2022-07-13 04:04:53,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:53,169 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:53,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:53,200 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:53,201 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:53,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1123140954] [2022-07-13 04:04:53,201 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1123140954] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:53,201 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:53,201 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:53,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [22324105] [2022-07-13 04:04:53,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:53,202 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:53,202 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:53,203 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:53,203 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:53,203 INFO L87 Difference]: Start difference. First operand 29437 states and 54130 transitions. cyclomatic complexity: 24694 Second operand has 4 states, 4 states have (on average 20.75) internal successors, (83), 4 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:53,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:53,317 INFO L93 Difference]: Finished difference Result 29409 states and 54088 transitions. [2022-07-13 04:04:53,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-13 04:04:53,318 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29409 states and 54088 transitions. [2022-07-13 04:04:53,445 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:53,720 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29409 states to 29409 states and 54088 transitions. [2022-07-13 04:04:53,720 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29409 [2022-07-13 04:04:53,741 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29409 [2022-07-13 04:04:53,741 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29409 states and 54088 transitions. [2022-07-13 04:04:53,761 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:53,761 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29409 states and 54088 transitions. [2022-07-13 04:04:53,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29409 states and 54088 transitions. [2022-07-13 04:04:53,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29409 to 29409. [2022-07-13 04:04:53,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29409 states, 29409 states have (on average 1.8391648814988608) internal successors, (54088), 29408 states have internal predecessors, (54088), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:54,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29409 states to 29409 states and 54088 transitions. [2022-07-13 04:04:54,036 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29409 states and 54088 transitions. [2022-07-13 04:04:54,036 INFO L374 stractBuchiCegarLoop]: Abstraction has 29409 states and 54088 transitions. [2022-07-13 04:04:54,036 INFO L287 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2022-07-13 04:04:54,036 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29409 states and 54088 transitions. [2022-07-13 04:04:54,114 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:54,114 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:54,114 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:54,118 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:54,118 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:54,118 INFO L752 eck$LassoCheckResult]: Stem: 1738440#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1738441#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1737745#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1737746#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1738257#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1738258#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1739114#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1739115#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1739410#L3272 assume !(0 == getOrigin_~person#1); 1739411#L3276 assume !(1 == getOrigin_~person#1); 1738391#L3280 assume !(2 == getOrigin_~person#1); 1738392#L3284 assume !(3 == getOrigin_~person#1); 1739371#L3288 assume !(4 == getOrigin_~person#1); 1739823#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1738556#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1738557#L414 assume !(0 == initPersonOnFloor_~floor#1); 1737529#L441 assume 1 == initPersonOnFloor_~floor#1; 1737530#L442 assume !(0 == initPersonOnFloor_~person#1); 1738090#L445 assume !(1 == initPersonOnFloor_~person#1); 1738091#L448 assume !(2 == initPersonOnFloor_~person#1); 1737741#L451 assume !(3 == initPersonOnFloor_~person#1); 1737742#L454 assume !(4 == initPersonOnFloor_~person#1); 1737781#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1737782#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1738508#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1738407#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1738408#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1738528#L206 assume !(0 == callOnFloor_~floorID#1); 1738530#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1737498#L218-2 assume { :end_inline_callOnFloor } true; 1737499#L558 assume { :end_inline_initPersonOnFloor } true; 1739521#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1738926#L3272-1 assume !(0 == getOrigin_~person#1); 1738554#L3276-1 assume !(1 == getOrigin_~person#1); 1738555#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1738697#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1738342#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1738343#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1739770#L468-1 assume 2 == initPersonOnFloor_~floor#1; 1739647#L469-2 assume !(0 == initPersonOnFloor_~person#1); 1738746#L472-2 assume !(1 == initPersonOnFloor_~person#1); 1738747#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1738771#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1739323#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1739422#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1739943#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1739942#L206-2 assume !(0 == callOnFloor_~floorID#1); 1739941#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1739937#L218-5 assume { :end_inline_callOnFloor } true; 1739936#L558-1 assume { :end_inline_initPersonOnFloor } true; 1739935#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1739934#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1739933#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1739931#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1739049#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1739050#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1739073#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1739075#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1739928#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1739203#L2239 assume !(1 == ~doorState~0); 1737680#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1737681#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1738010#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1738011#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1739502#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1738128#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1738130#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1739930#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1738131#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1737728#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1738570#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1739719#L1966-2 assume !(1 == ~currentHeading~0); 1739725#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1739662#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1739663#L1982-5 assume { :end_inline_continueInDirection } true; 1737993#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1738088#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1738089#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1737481#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1737482#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1739548#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1739051#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1737707#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1738684#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1738775#L3022-2 [2022-07-13 04:04:54,118 INFO L754 eck$LassoCheckResult]: Loop: 1738775#L3022-2 assume !false; 1747037#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1747036#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1747035#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1747034#L3030 assume 1 != cleanup_~tmp___0~9#1; 1747033#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1747032#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1747031#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1747029#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1747027#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1747028#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1758006#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1753909#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1753910#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1757458#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1757456#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1757454#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1757452#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1757449#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1757448#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1757446#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1757447#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1757445#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1757440#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1757438#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1757437#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1757436#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1741063#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1740113#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1740114#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1740108#L1759-2 assume !(0 == ~currentFloorID~0); 1740105#L1765-2 assume ~currentFloorID~0 > 0; 1740103#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1740104#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1740109#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1740101#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1740102#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1740792#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1740789#L1966-3 assume !(1 == ~currentHeading~0); 1740786#L1976-9 assume !(0 == ~currentFloorID~0); 1740762#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1740757#L1982-7 assume { :end_inline_continueInDirection } true; 1740758#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1746963#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1746960#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1746961#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1746962#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1740734#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1740730#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1740600#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1740601#L3022-2 assume !false; 1740596#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1740597#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1740572#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1740573#L3030 assume 1 != cleanup_~tmp___0~9#1; 1740567#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1740568#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1740543#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1740544#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1746943#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1740528#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1740529#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1740504#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1740505#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1740479#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1740480#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1740475#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1740476#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1740473#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1740472#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1740470#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1740469#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1740465#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1740458#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1740454#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1740447#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1739660#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1739661#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1739827#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1738588#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1740444#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1740442#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1740440#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1740441#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1739564#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1737944#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1739330#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1739103#L1966-5 assume !(1 == ~currentHeading~0); 1739105#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1737743#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1737744#L1982-11 assume { :end_inline_continueInDirection } true; 1738730#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1747057#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1747056#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1747055#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1747054#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1747052#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1747046#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1747039#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1747038#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1738775#L3022-2 [2022-07-13 04:04:54,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:54,118 INFO L85 PathProgramCache]: Analyzing trace with hash -1871011021, now seen corresponding path program 1 times [2022-07-13 04:04:54,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:54,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340589070] [2022-07-13 04:04:54,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:54,119 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:54,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:54,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:54,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:54,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340589070] [2022-07-13 04:04:54,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [340589070] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:54,146 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:54,146 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 04:04:54,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1396209038] [2022-07-13 04:04:54,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:54,146 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:54,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:54,146 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 5 times [2022-07-13 04:04:54,147 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:54,147 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1622774058] [2022-07-13 04:04:54,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:54,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:54,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:54,171 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:54,171 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:54,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1622774058] [2022-07-13 04:04:54,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1622774058] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:54,172 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:54,172 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:54,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [585199273] [2022-07-13 04:04:54,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:54,172 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:54,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:54,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 04:04:54,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 04:04:54,173 INFO L87 Difference]: Start difference. First operand 29409 states and 54088 transitions. cyclomatic complexity: 24680 Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:54,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:54,331 INFO L93 Difference]: Finished difference Result 29449 states and 54135 transitions. [2022-07-13 04:04:54,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 04:04:54,332 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29449 states and 54135 transitions. [2022-07-13 04:04:54,441 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:54,521 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29449 states to 29449 states and 54135 transitions. [2022-07-13 04:04:54,521 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29449 [2022-07-13 04:04:54,544 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29449 [2022-07-13 04:04:54,544 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29449 states and 54135 transitions. [2022-07-13 04:04:54,562 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:54,562 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29449 states and 54135 transitions. [2022-07-13 04:04:54,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29449 states and 54135 transitions. [2022-07-13 04:04:54,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29449 to 29409. [2022-07-13 04:04:54,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29409 states, 29409 states have (on average 1.83909687510626) internal successors, (54086), 29408 states have internal predecessors, (54086), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:55,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29409 states to 29409 states and 54086 transitions. [2022-07-13 04:04:55,049 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29409 states and 54086 transitions. [2022-07-13 04:04:55,049 INFO L374 stractBuchiCegarLoop]: Abstraction has 29409 states and 54086 transitions. [2022-07-13 04:04:55,049 INFO L287 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2022-07-13 04:04:55,049 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29409 states and 54086 transitions. [2022-07-13 04:04:55,127 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:55,127 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:55,127 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:55,131 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:55,131 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:55,138 INFO L752 eck$LassoCheckResult]: Stem: 1797321#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1797322#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1796628#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1796629#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1797141#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1797142#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1798000#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1798001#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1798297#L3272 assume !(0 == getOrigin_~person#1); 1798298#L3276 assume !(1 == getOrigin_~person#1); 1797274#L3280 assume !(2 == getOrigin_~person#1); 1797275#L3284 assume !(3 == getOrigin_~person#1); 1798256#L3288 assume !(4 == getOrigin_~person#1); 1798722#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1797437#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1797438#L414 assume !(0 == initPersonOnFloor_~floor#1); 1796414#L441 assume 1 == initPersonOnFloor_~floor#1; 1796415#L442 assume !(0 == initPersonOnFloor_~person#1); 1796976#L445 assume !(1 == initPersonOnFloor_~person#1); 1796977#L448 assume !(2 == initPersonOnFloor_~person#1); 1796626#L451 assume !(3 == initPersonOnFloor_~person#1); 1796627#L454 assume !(4 == initPersonOnFloor_~person#1); 1796664#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1796665#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1797389#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1797288#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1797289#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1797409#L206 assume !(0 == callOnFloor_~floorID#1); 1797411#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1796381#L218-2 assume { :end_inline_callOnFloor } true; 1796382#L558 assume { :end_inline_initPersonOnFloor } true; 1798410#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1797813#L3272-1 assume !(0 == getOrigin_~person#1); 1797435#L3276-1 assume !(1 == getOrigin_~person#1); 1797436#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1797581#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1797229#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1797230#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1798666#L468-1 assume 2 == initPersonOnFloor_~floor#1; 1798544#L469-2 assume !(0 == initPersonOnFloor_~person#1); 1797630#L472-2 assume !(1 == initPersonOnFloor_~person#1); 1797631#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1797657#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1798208#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1798308#L2629-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1798840#L2632-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1798838#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1798837#L206-2 assume !(0 == callOnFloor_~floorID#1); 1798836#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1798832#L218-5 assume { :end_inline_callOnFloor } true; 1798831#L558-1 assume { :end_inline_initPersonOnFloor } true; 1798830#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1798829#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1798828#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1798827#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1797936#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1797937#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1797960#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1797962#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1798823#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1798086#L2239 assume !(1 == ~doorState~0); 1796563#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1796564#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1796893#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1796894#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1798391#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1797012#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1797014#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1798825#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1797015#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1796611#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1797451#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1798621#L1966-2 assume !(1 == ~currentHeading~0); 1798628#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1798557#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1798558#L1982-5 assume { :end_inline_continueInDirection } true; 1796879#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1801324#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1798715#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1798716#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1805758#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1805759#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1797938#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1796590#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1797661#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1797662#L3022-2 [2022-07-13 04:04:55,139 INFO L754 eck$LassoCheckResult]: Loop: 1797662#L3022-2 assume !false; 1806026#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1806025#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1806024#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1806023#L3030 assume 1 != cleanup_~tmp___0~9#1; 1806022#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1806021#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1806020#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1806018#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1806019#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1817991#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1817986#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1817981#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1817960#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1817954#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1817942#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1817940#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1817938#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1817934#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1817929#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1817926#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1817927#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1817933#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1817928#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1817925#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1817923#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1817922#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1802375#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1802374#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1802372#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1802373#L1759-2 assume !(0 == ~currentFloorID~0); 1802382#L1765-2 assume ~currentFloorID~0 > 0; 1802381#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1799098#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1799099#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1801464#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1801383#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1801378#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1801353#L1966-3 assume !(1 == ~currentHeading~0); 1801346#L1976-9 assume !(0 == ~currentFloorID~0); 1801336#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1801331#L1982-7 assume { :end_inline_continueInDirection } true; 1801332#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1805879#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1805878#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1805877#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1805876#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1801277#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1801273#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1799348#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1799349#L3022-2 assume !false; 1799344#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1799345#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1799340#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1799341#L3030 assume 1 != cleanup_~tmp___0~9#1; 1799336#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1799337#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1799332#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1799333#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1805866#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1799320#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1799321#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1799295#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1799296#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1799279#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1799280#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1799275#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1799276#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1799273#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1799272#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1799271#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1799270#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1799268#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1799267#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1799265#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1799264#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1798555#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1798556#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1798725#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1798744#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1804786#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1798365#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1798367#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1804781#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1798460#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1797547#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1798213#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1797988#L1966-5 assume !(1 == ~currentHeading~0); 1797990#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1797518#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1798788#L1982-11 assume { :end_inline_continueInDirection } true; 1797614#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1806046#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1806045#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1806044#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1806043#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1806041#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1806035#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1806028#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1806027#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1797662#L3022-2 [2022-07-13 04:04:55,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:55,139 INFO L85 PathProgramCache]: Analyzing trace with hash -903599737, now seen corresponding path program 1 times [2022-07-13 04:04:55,139 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:55,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [523010837] [2022-07-13 04:04:55,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:55,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:55,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:55,181 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:55,181 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:55,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [523010837] [2022-07-13 04:04:55,182 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [523010837] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:55,182 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:55,182 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 04:04:55,182 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [362550905] [2022-07-13 04:04:55,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:55,182 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:55,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:55,183 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 6 times [2022-07-13 04:04:55,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:55,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [383498251] [2022-07-13 04:04:55,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:55,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:55,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:55,215 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:55,215 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:55,215 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [383498251] [2022-07-13 04:04:55,215 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [383498251] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:55,215 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:55,216 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:55,216 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [451825460] [2022-07-13 04:04:55,216 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:55,216 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:55,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:55,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 04:04:55,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 04:04:55,217 INFO L87 Difference]: Start difference. First operand 29409 states and 54086 transitions. cyclomatic complexity: 24678 Second operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:55,382 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:55,382 INFO L93 Difference]: Finished difference Result 29426 states and 54103 transitions. [2022-07-13 04:04:55,382 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 04:04:55,383 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29426 states and 54103 transitions. [2022-07-13 04:04:55,497 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:55,586 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29426 states to 29426 states and 54103 transitions. [2022-07-13 04:04:55,586 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29426 [2022-07-13 04:04:55,610 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29426 [2022-07-13 04:04:55,610 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29426 states and 54103 transitions. [2022-07-13 04:04:55,629 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:55,629 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29426 states and 54103 transitions. [2022-07-13 04:04:55,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29426 states and 54103 transitions. [2022-07-13 04:04:56,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29426 to 29409. [2022-07-13 04:04:56,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29409 states, 29409 states have (on average 1.8390288687136591) internal successors, (54084), 29408 states have internal predecessors, (54084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:56,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29409 states to 29409 states and 54084 transitions. [2022-07-13 04:04:56,101 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29409 states and 54084 transitions. [2022-07-13 04:04:56,101 INFO L374 stractBuchiCegarLoop]: Abstraction has 29409 states and 54084 transitions. [2022-07-13 04:04:56,101 INFO L287 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2022-07-13 04:04:56,101 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29409 states and 54084 transitions. [2022-07-13 04:04:56,177 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-13 04:04:56,177 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:56,177 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:56,181 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:56,181 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:56,181 INFO L752 eck$LassoCheckResult]: Stem: 1856182#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1856183#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1855488#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1855489#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1856001#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1856002#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1856862#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1856863#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1857141#L3272 assume !(0 == getOrigin_~person#1); 1857142#L3276 assume !(1 == getOrigin_~person#1); 1856133#L3280 assume !(2 == getOrigin_~person#1); 1856134#L3284 assume !(3 == getOrigin_~person#1); 1857101#L3288 assume !(4 == getOrigin_~person#1); 1857561#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1856297#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1856298#L414 assume !(0 == initPersonOnFloor_~floor#1); 1855274#L441 assume 1 == initPersonOnFloor_~floor#1; 1855275#L442 assume !(0 == initPersonOnFloor_~person#1); 1855837#L445 assume !(1 == initPersonOnFloor_~person#1); 1855838#L448 assume !(2 == initPersonOnFloor_~person#1); 1855486#L451 assume !(3 == initPersonOnFloor_~person#1); 1855487#L454 assume !(4 == initPersonOnFloor_~person#1); 1855524#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1855525#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1856249#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1856149#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1856150#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1856269#L206 assume !(0 == callOnFloor_~floorID#1); 1856271#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1855241#L218-2 assume { :end_inline_callOnFloor } true; 1855242#L558 assume { :end_inline_initPersonOnFloor } true; 1857251#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1856671#L3272-1 assume !(0 == getOrigin_~person#1); 1856295#L3276-1 assume !(1 == getOrigin_~person#1); 1856296#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1856436#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1856088#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1856089#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1857512#L468-1 assume 2 == initPersonOnFloor_~floor#1; 1857388#L469-2 assume !(0 == initPersonOnFloor_~person#1); 1856487#L472-2 assume !(1 == initPersonOnFloor_~person#1); 1856488#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1856514#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1857060#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1857153#L2629-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1857679#L2632-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1857677#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1857676#L206-2 assume !(0 == callOnFloor_~floorID#1); 1857675#L209-2 assume !(1 == callOnFloor_~floorID#1); 1857672#L212-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1857671#L218-5 assume { :end_inline_callOnFloor } true; 1857670#L558-1 assume { :end_inline_initPersonOnFloor } true; 1857669#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1857668#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1857667#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1857666#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1856796#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1856797#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1856822#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1856824#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1857662#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1856943#L2239 assume !(1 == ~doorState~0); 1855423#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1855424#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1855755#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1855756#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1857230#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1855873#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1855875#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1857664#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1855876#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1855471#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1856311#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1857459#L1966-2 assume !(1 == ~currentHeading~0); 1857468#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1857401#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1857402#L1982-5 assume { :end_inline_continueInDirection } true; 1855741#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1855832#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1855833#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1855224#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1855225#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1857285#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1856798#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1855450#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1856424#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1856520#L3022-2 [2022-07-13 04:04:56,181 INFO L754 eck$LassoCheckResult]: Loop: 1856520#L3022-2 assume !false; 1864802#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1864801#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1864800#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1864796#L3030 assume 1 != cleanup_~tmp___0~9#1; 1864793#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1864790#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1864787#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1864762#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1864742#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1864737#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1864735#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1864727#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1864679#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1864639#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1864637#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1864634#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1864635#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1864669#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1864667#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1869511#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1869510#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1869509#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1869505#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1869503#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1869497#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1869495#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1860255#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1860254#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1860252#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1860253#L1759-2 assume !(0 == ~currentFloorID~0); 1861043#L1765-2 assume ~currentFloorID~0 > 0; 1857921#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1857922#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1857932#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1860075#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1860051#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1860044#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1860035#L1966-3 assume !(1 == ~currentHeading~0); 1860028#L1976-9 assume !(0 == ~currentFloorID~0); 1860018#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1860013#L1982-7 assume { :end_inline_continueInDirection } true; 1860014#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1864803#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1864797#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1864798#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1864799#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1858429#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1858420#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1858389#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1858386#L3022-2 assume !false; 1858385#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1858384#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1858383#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1858382#L3030 assume 1 != cleanup_~tmp___0~9#1; 1858381#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1858380#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1858377#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1858378#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1864744#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1858364#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1858365#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1858352#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1858353#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1858291#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1858292#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1858274#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1858275#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1858271#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1858270#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1858269#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1858268#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1858266#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1858265#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1858263#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1856189#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1856190#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1857400#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1857564#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1856330#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1858294#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1857201#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1857203#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1859199#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1857304#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1855688#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1864538#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1856851#L1966-5 assume !(1 == ~currentHeading~0); 1856853#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1855484#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1855485#L1982-11 assume { :end_inline_continueInDirection } true; 1856469#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1864821#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1864819#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864817#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864813#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864809#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864806#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864805#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1864804#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1856520#L3022-2 [2022-07-13 04:04:56,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:56,182 INFO L85 PathProgramCache]: Analyzing trace with hash -48940633, now seen corresponding path program 1 times [2022-07-13 04:04:56,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:56,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2025155786] [2022-07-13 04:04:56,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:56,182 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:56,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:56,203 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:56,203 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:56,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2025155786] [2022-07-13 04:04:56,204 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2025155786] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:56,204 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:56,204 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 04:04:56,204 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1772748247] [2022-07-13 04:04:56,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:56,204 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:56,204 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:56,205 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 8 times [2022-07-13 04:04:56,205 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:56,205 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1322677964] [2022-07-13 04:04:56,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:56,205 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:56,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:56,228 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:56,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:56,228 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1322677964] [2022-07-13 04:04:56,228 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1322677964] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:56,228 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:56,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:56,229 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144700807] [2022-07-13 04:04:56,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:56,229 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:56,229 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:56,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 04:04:56,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 04:04:56,230 INFO L87 Difference]: Start difference. First operand 29409 states and 54084 transitions. cyclomatic complexity: 24676 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:56,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:56,337 INFO L93 Difference]: Finished difference Result 29645 states and 54442 transitions. [2022-07-13 04:04:56,338 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 04:04:56,338 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29645 states and 54442 transitions. [2022-07-13 04:04:56,459 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26492 [2022-07-13 04:04:56,540 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29645 states to 29645 states and 54442 transitions. [2022-07-13 04:04:56,540 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29645 [2022-07-13 04:04:56,561 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29645 [2022-07-13 04:04:56,561 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29645 states and 54442 transitions. [2022-07-13 04:04:56,579 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:56,579 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29645 states and 54442 transitions. [2022-07-13 04:04:56,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29645 states and 54442 transitions. [2022-07-13 04:04:57,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29645 to 29600. [2022-07-13 04:04:57,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29600 states, 29600 states have (on average 1.8377027027027026) internal successors, (54396), 29599 states have internal predecessors, (54396), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:57,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29600 states to 29600 states and 54396 transitions. [2022-07-13 04:04:57,101 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29600 states and 54396 transitions. [2022-07-13 04:04:57,101 INFO L374 stractBuchiCegarLoop]: Abstraction has 29600 states and 54396 transitions. [2022-07-13 04:04:57,101 INFO L287 stractBuchiCegarLoop]: ======== Iteration 30 ============ [2022-07-13 04:04:57,101 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29600 states and 54396 transitions. [2022-07-13 04:04:57,185 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26447 [2022-07-13 04:04:57,185 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:04:57,185 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:04:57,188 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:57,189 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:04:57,189 INFO L752 eck$LassoCheckResult]: Stem: 1915241#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1915242#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1914556#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1914557#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1915064#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1915065#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1915905#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1915906#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1916193#L3272 assume !(0 == getOrigin_~person#1); 1916194#L3276 assume !(1 == getOrigin_~person#1); 1915194#L3280 assume !(2 == getOrigin_~person#1); 1915195#L3284 assume !(3 == getOrigin_~person#1); 1916150#L3288 assume !(4 == getOrigin_~person#1); 1916589#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1915355#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1915356#L414 assume !(0 == initPersonOnFloor_~floor#1); 1914337#L441 assume 1 == initPersonOnFloor_~floor#1; 1914338#L442 assume !(0 == initPersonOnFloor_~person#1); 1914901#L445 assume !(1 == initPersonOnFloor_~person#1); 1914902#L448 assume !(2 == initPersonOnFloor_~person#1); 1914552#L451 assume !(3 == initPersonOnFloor_~person#1); 1914553#L454 assume !(4 == initPersonOnFloor_~person#1); 1914592#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1914593#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1915308#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1915208#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1915209#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1915327#L206 assume !(0 == callOnFloor_~floorID#1); 1915329#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1914306#L218-2 assume { :end_inline_callOnFloor } true; 1914307#L558 assume { :end_inline_initPersonOnFloor } true; 1916302#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1915717#L3272-1 assume !(0 == getOrigin_~person#1); 1915353#L3276-1 assume !(1 == getOrigin_~person#1); 1915354#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1915493#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1915149#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1915150#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1916540#L468-1 assume 2 == initPersonOnFloor_~floor#1; 1916430#L469-2 assume !(0 == initPersonOnFloor_~person#1); 1915541#L472-2 assume !(1 == initPersonOnFloor_~person#1); 1915542#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1915568#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1916109#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1916206#L2629-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1916689#L2632-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1916687#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1916686#L206-2 assume !(0 == callOnFloor_~floorID#1); 1916685#L209-2 assume !(1 == callOnFloor_~floorID#1); 1916682#L212-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1916681#L218-5 assume { :end_inline_callOnFloor } true; 1916680#L558-1 assume { :end_inline_initPersonOnFloor } true; 1916679#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1916678#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1916677#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1916676#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1915840#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1915841#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1915864#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1915866#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1916673#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1915992#L2239 assume 1 == ~doorState~0;~doorState~0 := 0; 1914491#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1914492#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1914821#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1914822#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1916282#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1914936#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1914938#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1916674#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1914939#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1914539#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1915369#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1916499#L1966-2 assume !(1 == ~currentHeading~0); 1916504#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1916443#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1916444#L1982-5 assume { :end_inline_continueInDirection } true; 1914807#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1914897#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1914898#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1916583#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1918433#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1918431#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1918425#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1918418#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1918416#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1918417#L3022-2 [2022-07-13 04:04:57,189 INFO L754 eck$LassoCheckResult]: Loop: 1918417#L3022-2 assume !false; 1920062#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1920061#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1920060#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1920059#L3030 assume 1 != cleanup_~tmp___0~9#1; 1920058#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1920057#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1920056#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1920054#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1920055#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1921162#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1921161#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1921157#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1921140#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1921135#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1921134#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1921133#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1921132#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1921130#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1921131#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1935591#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1935589#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1935588#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1935584#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1935583#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1935582#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1917845#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1917769#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1917765#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1917762#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1917759#L1759-2 assume !(0 == ~currentFloorID~0); 1917757#L1765-2 assume ~currentFloorID~0 > 0; 1917754#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1914571#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1914572#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1917752#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1917753#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1930344#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1914367#L1966-3 assume !(1 == ~currentHeading~0); 1914368#L1976-9 assume !(0 == ~currentFloorID~0); 1918460#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1918457#L1982-7 assume { :end_inline_continueInDirection } true; 1918456#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1918455#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1918454#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1918453#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1918452#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1918446#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1918436#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1918415#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1918411#L3022-2 assume !false; 1918407#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1918402#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1918395#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1917685#L3030 assume 1 != cleanup_~tmp___0~9#1; 1917683#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1917682#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1917646#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1917302#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1917303#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1918396#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1918391#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1918374#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1918049#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1918036#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1918030#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1918021#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1918015#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1918016#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1930339#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1930338#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1930337#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1930336#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1930335#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1930334#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1930333#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1915249#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1916442#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1916594#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1914687#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1915854#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1915855#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1916257#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1930463#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1916354#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1914756#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1916114#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1915894#L1966-5 assume !(1 == ~currentHeading~0); 1915896#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1914554#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1914555#L1982-11 assume { :end_inline_continueInDirection } true; 1915524#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1918592#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1918578#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1918579#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1920072#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1920068#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1920065#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1920064#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1920063#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1918417#L3022-2 [2022-07-13 04:04:57,189 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:57,189 INFO L85 PathProgramCache]: Analyzing trace with hash -189489243, now seen corresponding path program 1 times [2022-07-13 04:04:57,190 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:57,190 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [361551221] [2022-07-13 04:04:57,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:57,190 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:57,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:57,214 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:04:57,214 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:57,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [361551221] [2022-07-13 04:04:57,214 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [361551221] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:57,215 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:57,215 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:04:57,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [94694275] [2022-07-13 04:04:57,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:57,215 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:04:57,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:04:57,216 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 9 times [2022-07-13 04:04:57,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:04:57,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [274724957] [2022-07-13 04:04:57,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:04:57,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:04:57,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:04:57,241 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:04:57,241 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:04:57,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [274724957] [2022-07-13 04:04:57,241 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [274724957] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:04:57,241 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:04:57,242 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:04:57,242 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1944568508] [2022-07-13 04:04:57,242 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:04:57,242 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:04:57,242 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:04:57,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:04:57,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:04:57,243 INFO L87 Difference]: Start difference. First operand 29600 states and 54396 transitions. cyclomatic complexity: 24797 Second operand has 4 states, 4 states have (on average 21.5) internal successors, (86), 3 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:57,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:04:57,730 INFO L93 Difference]: Finished difference Result 105521 states and 194395 transitions. [2022-07-13 04:04:57,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:04:57,731 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 105521 states and 194395 transitions. [2022-07-13 04:04:58,239 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 102283 [2022-07-13 04:04:58,943 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 105521 states to 105521 states and 194395 transitions. [2022-07-13 04:04:58,944 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 105521 [2022-07-13 04:04:59,022 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 105521 [2022-07-13 04:04:59,022 INFO L73 IsDeterministic]: Start isDeterministic. Operand 105521 states and 194395 transitions. [2022-07-13 04:04:59,084 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:04:59,084 INFO L369 hiAutomatonCegarLoop]: Abstraction has 105521 states and 194395 transitions. [2022-07-13 04:04:59,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105521 states and 194395 transitions. [2022-07-13 04:04:59,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105521 to 55714. [2022-07-13 04:04:59,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55714 states, 55714 states have (on average 1.8381196826650392) internal successors, (102409), 55713 states have internal predecessors, (102409), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:04:59,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55714 states to 55714 states and 102409 transitions. [2022-07-13 04:04:59,803 INFO L392 hiAutomatonCegarLoop]: Abstraction has 55714 states and 102409 transitions. [2022-07-13 04:04:59,803 INFO L374 stractBuchiCegarLoop]: Abstraction has 55714 states and 102409 transitions. [2022-07-13 04:04:59,803 INFO L287 stractBuchiCegarLoop]: ======== Iteration 31 ============ [2022-07-13 04:04:59,803 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55714 states and 102409 transitions. [2022-07-13 04:05:00,257 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 52537 [2022-07-13 04:05:00,257 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:05:00,257 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:05:00,262 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:05:00,263 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:05:00,263 INFO L752 eck$LassoCheckResult]: Stem: 2050379#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 2050380#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 2049687#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2049688#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 2050199#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 2050200#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 2051062#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2051063#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 2051352#L3272 assume !(0 == getOrigin_~person#1); 2051353#L3276 assume !(1 == getOrigin_~person#1); 2050332#L3280 assume !(2 == getOrigin_~person#1); 2050333#L3284 assume !(3 == getOrigin_~person#1); 2051311#L3288 assume !(4 == getOrigin_~person#1); 2051767#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 2050495#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2050496#L414 assume !(0 == initPersonOnFloor_~floor#1); 2049472#L441 assume 1 == initPersonOnFloor_~floor#1; 2049473#L442 assume !(0 == initPersonOnFloor_~person#1); 2050031#L445 assume !(1 == initPersonOnFloor_~person#1); 2050032#L448 assume !(2 == initPersonOnFloor_~person#1); 2049683#L451 assume !(3 == initPersonOnFloor_~person#1); 2049684#L454 assume !(4 == initPersonOnFloor_~person#1); 2049723#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2049724#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2050447#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2050346#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2050347#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2050468#L206 assume !(0 == callOnFloor_~floorID#1); 2050469#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2050692#L218-2 assume { :end_inline_callOnFloor } true; 2051911#L558 assume { :end_inline_initPersonOnFloor } true; 2051910#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 2051909#L3272-1 assume !(0 == getOrigin_~person#1); 2051908#L3276-1 assume !(1 == getOrigin_~person#1); 2051907#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 2051906#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2051905#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 2051904#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 2051903#L468-1 assume 2 == initPersonOnFloor_~floor#1; 2051902#L469-2 assume !(0 == initPersonOnFloor_~person#1); 2051901#L472-2 assume !(1 == initPersonOnFloor_~person#1); 2051898#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2051896#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2051895#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2051894#L2629-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 2051892#L2632-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 2051890#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2051889#L206-2 assume !(0 == callOnFloor_~floorID#1); 2051888#L209-2 assume !(1 == callOnFloor_~floorID#1); 2051885#L212-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2051884#L218-5 assume { :end_inline_callOnFloor } true; 2051883#L558-1 assume { :end_inline_initPersonOnFloor } true; 2051882#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2051881#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2051880#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 2051878#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2050996#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2050997#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 2051021#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 2051023#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2051875#L2148 assume !(0 != timeShift_~tmp___9~2#1); 2051143#L2239 assume 1 == ~doorState~0;~doorState~0 := 0; 2049622#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2049623#L1590 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 2051662#L717 stopRequestedInDirection_#t~ret36#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~7#1 := stopRequestedInDirection_#t~ret36#1;havoc stopRequestedInDirection_#t~ret36#1; 2050115#L1594 assume 0 != stopRequestedInDirection_~tmp~7#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2050116#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2051435#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 2050069#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 2050071#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2051877#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 2050072#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2049670#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 2050509#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 2051666#L1966-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 2049837#L717-4 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~8#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 2049838#L1970-6 assume 0 != continueInDirection_~tmp~8#1;~currentHeading~0 := 0; 2051752#L1976-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2051600#L1982-5 assume { :end_inline_continueInDirection } true; 2049937#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2050029#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 2050030#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 2051760#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 2061119#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 2061118#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 2061091#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 2061083#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2056307#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2056305#L3022-2 [2022-07-13 04:05:00,264 INFO L754 eck$LassoCheckResult]: Loop: 2056305#L3022-2 assume !false; 2056301#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 2056299#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2056297#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 2056295#L3030 assume 1 != cleanup_~tmp___0~9#1; 2056293#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2056291#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2056290#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 2056288#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 2056289#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2060804#L138-22 assume !(0 == isFloorCalling_~floorID#1); 2061331#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2061326#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 2061270#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2061264#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2061263#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 2061262#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2061261#L138-26 assume !(0 == isFloorCalling_~floorID#1); 2061259#L142-26 assume !(1 == isFloorCalling_~floorID#1); 2061256#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2061255#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 2061239#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2061240#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 2061254#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2061250#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 2061241#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 2061242#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2061227#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 2052561#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2053608#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2053607#L1590-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 2053606#L717-5 stopRequestedInDirection_#t~ret36#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~7#1 := stopRequestedInDirection_#t~ret36#1;havoc stopRequestedInDirection_#t~ret36#1; 2053605#L1594-2 assume !(0 != stopRequestedInDirection_~tmp~7#1); 2053604#L1600-2 assume ~currentFloorID~0 < 0; 2053602#L1601-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2053603#L138-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2053609#L165-27 stopRequestedInDirection_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~0#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 2053601#L1605-2 assume 0 != stopRequestedInDirection_~tmp___4~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2053158#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2053875#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 2054234#L1966-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 2054226#L717-6 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~8#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 2054220#L1970-9 assume 0 != continueInDirection_~tmp~8#1;~currentHeading~0 := 0; 2054216#L1976-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2054213#L1982-7 assume { :end_inline_continueInDirection } true; 2054212#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2054211#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 2054210#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2054209#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 2054208#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 2054203#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 2054192#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2054109#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2054105#L3022-2 assume !false; 2054103#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 2053975#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2053968#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 2053959#L3030 assume 1 != cleanup_~tmp___0~9#1; 2053958#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2053957#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2053261#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 2053255#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 2053256#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2060443#L138-22 assume !(0 == isFloorCalling_~floorID#1); 2060438#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2060433#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 2056485#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2056479#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2056477#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 2056475#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2056472#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2056470#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 2056468#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2056466#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2056464#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 2056461#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 2056459#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2056456#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 2056455#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2056450#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2056448#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 2051792#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2051793#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2056381#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 2056380#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 2056378#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2053253#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 2053254#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2056347#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 2056345#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 2056344#L1966-5 assume !(1 == ~currentHeading~0); 2056343#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2054715#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2054711#L1982-11 assume { :end_inline_continueInDirection } true; 2056333#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2056331#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 2056329#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 2056327#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 2056319#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 2056315#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 2056312#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 2056310#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2056308#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2056305#L3022-2 [2022-07-13 04:05:00,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:05:00,264 INFO L85 PathProgramCache]: Analyzing trace with hash -672918571, now seen corresponding path program 1 times [2022-07-13 04:05:00,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:05:00,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1031208533] [2022-07-13 04:05:00,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:05:00,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:05:00,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:05:00,306 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:05:00,306 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:05:00,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1031208533] [2022-07-13 04:05:00,307 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1031208533] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:05:00,307 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:05:00,307 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:05:00,307 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1312749316] [2022-07-13 04:05:00,307 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:05:00,307 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:05:00,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:05:00,308 INFO L85 PathProgramCache]: Analyzing trace with hash -1151540227, now seen corresponding path program 1 times [2022-07-13 04:05:00,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:05:00,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2030476074] [2022-07-13 04:05:00,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:05:00,308 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:05:00,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:05:00,324 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-13 04:05:00,324 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:05:00,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2030476074] [2022-07-13 04:05:00,325 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2030476074] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:05:00,325 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:05:00,325 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:05:00,325 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371208126] [2022-07-13 04:05:00,325 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:05:00,325 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:05:00,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:05:00,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:05:00,326 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:05:00,326 INFO L87 Difference]: Start difference. First operand 55714 states and 102409 transitions. cyclomatic complexity: 46696 Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 5 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:05:00,573 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:05:00,573 INFO L93 Difference]: Finished difference Result 55724 states and 102396 transitions. [2022-07-13 04:05:00,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 04:05:00,574 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55724 states and 102396 transitions. [2022-07-13 04:05:00,812 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 52547 [2022-07-13 04:05:00,973 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55724 states to 55724 states and 102396 transitions. [2022-07-13 04:05:00,973 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55724 [2022-07-13 04:05:01,016 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55724 [2022-07-13 04:05:01,016 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55724 states and 102396 transitions. [2022-07-13 04:05:01,049 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:05:01,049 INFO L369 hiAutomatonCegarLoop]: Abstraction has 55724 states and 102396 transitions. [2022-07-13 04:05:01,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55724 states and 102396 transitions. [2022-07-13 04:05:01,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55724 to 55714. [2022-07-13 04:05:01,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55714 states, 55714 states have (on average 1.8376171159852102) internal successors, (102381), 55713 states have internal predecessors, (102381), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:05:01,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55714 states to 55714 states and 102381 transitions. [2022-07-13 04:05:01,829 INFO L392 hiAutomatonCegarLoop]: Abstraction has 55714 states and 102381 transitions. [2022-07-13 04:05:01,829 INFO L374 stractBuchiCegarLoop]: Abstraction has 55714 states and 102381 transitions. [2022-07-13 04:05:01,829 INFO L287 stractBuchiCegarLoop]: ======== Iteration 32 ============ [2022-07-13 04:05:01,830 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55714 states and 102381 transitions. [2022-07-13 04:05:01,988 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 52537 [2022-07-13 04:05:01,989 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:05:01,989 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:05:01,996 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:05:01,996 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:05:01,996 INFO L752 eck$LassoCheckResult]: Stem: 2161831#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 2161832#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 2161141#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2161142#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 2161653#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 2161654#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 2162498#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2162499#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 2162777#L3272 assume !(0 == getOrigin_~person#1); 2162778#L3276 assume !(1 == getOrigin_~person#1); 2161785#L3280 assume !(2 == getOrigin_~person#1); 2161786#L3284 assume !(3 == getOrigin_~person#1); 2162739#L3288 assume !(4 == getOrigin_~person#1); 2163185#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 2161946#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2161947#L414 assume !(0 == initPersonOnFloor_~floor#1); 2160926#L441 assume 1 == initPersonOnFloor_~floor#1; 2160927#L442 assume !(0 == initPersonOnFloor_~person#1); 2161482#L445 assume !(1 == initPersonOnFloor_~person#1); 2161483#L448 assume !(2 == initPersonOnFloor_~person#1); 2161137#L451 assume !(3 == initPersonOnFloor_~person#1); 2161138#L454 assume !(4 == initPersonOnFloor_~person#1); 2161177#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2161178#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2161899#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2161798#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2161799#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2161919#L206 assume !(0 == callOnFloor_~floorID#1); 2161920#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2162140#L218-2 assume { :end_inline_callOnFloor } true; 2163316#L558 assume { :end_inline_initPersonOnFloor } true; 2163315#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 2163314#L3272-1 assume !(0 == getOrigin_~person#1); 2163313#L3276-1 assume !(1 == getOrigin_~person#1); 2163312#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 2163311#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2163310#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 2163309#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 2163308#L468-1 assume 2 == initPersonOnFloor_~floor#1; 2163307#L469-2 assume !(0 == initPersonOnFloor_~person#1); 2163306#L472-2 assume !(1 == initPersonOnFloor_~person#1); 2163303#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2163301#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2163300#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2163299#L2629-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 2163297#L2632-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 2163295#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2163294#L206-2 assume !(0 == callOnFloor_~floorID#1); 2163293#L209-2 assume !(1 == callOnFloor_~floorID#1); 2163290#L212-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2163289#L218-5 assume { :end_inline_callOnFloor } true; 2163288#L558-1 assume { :end_inline_initPersonOnFloor } true; 2163287#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2163286#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2163285#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 2163283#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2162436#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2162437#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 2162457#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 2162459#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2163280#L2148 assume !(0 != timeShift_~tmp___9~2#1); 2162584#L2239 assume 1 == ~doorState~0;~doorState~0 := 0; 2161076#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2161077#L1590 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 2163076#L717 stopRequestedInDirection_#t~ret36#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~7#1 := stopRequestedInDirection_#t~ret36#1;havoc stopRequestedInDirection_#t~ret36#1; 2161567#L1594 assume 0 != stopRequestedInDirection_~tmp~7#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2161568#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2162863#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 2161521#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 2161523#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2163282#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 2161524#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2161124#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 2161960#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 2163079#L1966-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 2161291#L717-4 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~8#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 2161292#L1970-6 assume 0 != continueInDirection_~tmp~8#1;~currentHeading~0 := 0; 2163016#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2163017#L1982-5 assume { :end_inline_continueInDirection } true; 2161389#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2161480#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 2161481#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 2163179#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 2175815#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 2175814#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 2175811#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 2175804#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2175747#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2175745#L3022-2 [2022-07-13 04:05:01,997 INFO L754 eck$LassoCheckResult]: Loop: 2175745#L3022-2 assume !false; 2175743#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 2175741#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2175739#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 2175736#L3030 assume 1 != cleanup_~tmp___0~9#1; 2175734#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2175733#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2175731#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 2175728#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 2163410#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2163411#L138-22 assume !(0 == isFloorCalling_~floorID#1); 2177073#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2177037#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 2177022#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2177004#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2176851#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 2176850#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2176849#L138-26 assume !(0 == isFloorCalling_~floorID#1); 2176847#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2176846#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 2176845#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2176844#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 2176842#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2176837#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 2176830#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 2176829#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2164706#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 2164699#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2164696#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2164693#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 2164690#L1759-2 assume !(0 == ~currentFloorID~0); 2164688#L1765-2 assume ~currentFloorID~0 > 0; 2164685#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2164686#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2164708#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 2164683#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2164684#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2176556#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 2176548#L1966-3 assume !(1 == ~currentHeading~0); 2176545#L1976-9 assume !(0 == ~currentFloorID~0); 2168671#L1976-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2176537#L1982-7 assume { :end_inline_continueInDirection } true; 2176530#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2176528#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 2176527#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2176525#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 2176522#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 2176513#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 2176507#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2176506#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2176505#L3022-2 assume !false; 2176504#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 2176503#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2176502#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 2176501#L3030 assume 1 != cleanup_~tmp___0~9#1; 2176500#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2176418#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2176417#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 2164325#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 2164326#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2176245#L138-22 assume !(0 == isFloorCalling_~floorID#1); 2176238#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2176233#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 2172338#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2172332#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2172329#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 2172328#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2172325#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2172324#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 2172321#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2172320#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2172318#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 2172316#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 2172313#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2172311#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 2172309#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2172307#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2172304#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 2163207#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2163208#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2172295#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 2170131#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 2172277#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2172275#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 2170129#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2170109#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 2170106#L2256-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 2170107#L2021-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 2161833#L2026-3 timeShift_#t~ret72#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 2161834#L1966-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 2160876#L717-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~8#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 2160877#L1970-12 assume 0 != continueInDirection_~tmp~8#1;~currentHeading~0 := 0; 2163175#L1976-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2175786#L1982-9 assume { :end_inline_continueInDirection } true; 2175782#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2175780#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 2175779#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 2175767#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 2175765#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 2175763#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 2175758#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 2175750#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2175748#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2175745#L3022-2 [2022-07-13 04:05:01,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:05:01,997 INFO L85 PathProgramCache]: Analyzing trace with hash 28146007, now seen corresponding path program 1 times [2022-07-13 04:05:01,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:05:01,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [296408315] [2022-07-13 04:05:01,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:05:01,998 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:05:02,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:05:02,053 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:05:02,053 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:05:02,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [296408315] [2022-07-13 04:05:02,053 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [296408315] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:05:02,053 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:05:02,053 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:05:02,053 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1916802893] [2022-07-13 04:05:02,054 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:05:02,054 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:05:02,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:05:02,054 INFO L85 PathProgramCache]: Analyzing trace with hash -49506638, now seen corresponding path program 1 times [2022-07-13 04:05:02,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:05:02,055 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1005847309] [2022-07-13 04:05:02,055 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:05:02,055 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:05:02,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:05:02,087 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 04:05:02,088 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:05:02,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1005847309] [2022-07-13 04:05:02,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1005847309] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:05:02,088 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:05:02,088 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:05:02,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802009838] [2022-07-13 04:05:02,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:05:02,089 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:05:02,089 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:05:02,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 04:05:02,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-13 04:05:02,090 INFO L87 Difference]: Start difference. First operand 55714 states and 102381 transitions. cyclomatic complexity: 46668 Second operand has 6 states, 6 states have (on average 14.666666666666666) internal successors, (88), 5 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:05:03,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:05:03,426 INFO L93 Difference]: Finished difference Result 125105 states and 229624 transitions. [2022-07-13 04:05:03,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-13 04:05:03,426 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 125105 states and 229624 transitions. [2022-07-13 04:05:03,975 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 121793 [2022-07-13 04:05:04,331 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 125105 states to 125105 states and 229624 transitions. [2022-07-13 04:05:04,331 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 125105 [2022-07-13 04:05:04,419 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 125105 [2022-07-13 04:05:04,419 INFO L73 IsDeterministic]: Start isDeterministic. Operand 125105 states and 229624 transitions. [2022-07-13 04:05:04,493 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:05:04,494 INFO L369 hiAutomatonCegarLoop]: Abstraction has 125105 states and 229624 transitions. [2022-07-13 04:05:04,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125105 states and 229624 transitions.