./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 09d600be73ca435c113b9c0e8e087d96a910d62ea2126c235d6963c00b3a91c2 --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-14 15:44:30,941 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-14 15:44:30,942 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-14 15:44:30,977 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-14 15:44:30,977 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-14 15:44:30,978 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-14 15:44:30,979 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-14 15:44:30,980 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-14 15:44:30,988 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-14 15:44:30,989 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-14 15:44:30,991 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-14 15:44:30,991 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-14 15:44:30,992 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-14 15:44:30,992 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-14 15:44:30,993 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-14 15:44:30,993 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-14 15:44:30,994 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-14 15:44:30,995 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-14 15:44:30,996 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-14 15:44:30,997 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-14 15:44:30,998 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-14 15:44:31,001 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-14 15:44:31,001 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-14 15:44:31,002 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-14 15:44:31,007 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-14 15:44:31,010 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-14 15:44:31,013 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-14 15:44:31,013 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-14 15:44:31,014 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-14 15:44:31,015 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-14 15:44:31,015 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-14 15:44:31,016 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-14 15:44:31,016 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-14 15:44:31,017 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-14 15:44:31,018 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-14 15:44:31,018 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-14 15:44:31,020 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-14 15:44:31,021 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-14 15:44:31,021 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-14 15:44:31,021 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-14 15:44:31,022 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-14 15:44:31,022 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-14 15:44:31,024 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-14 15:44:31,052 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-14 15:44:31,052 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-14 15:44:31,052 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-14 15:44:31,052 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-14 15:44:31,054 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-14 15:44:31,054 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-14 15:44:31,054 INFO L138 SettingsManager]: * Use SBE=true [2022-07-14 15:44:31,054 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-14 15:44:31,054 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-14 15:44:31,055 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-14 15:44:31,055 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-14 15:44:31,055 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-14 15:44:31,055 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-14 15:44:31,055 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-14 15:44:31,056 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-14 15:44:31,056 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-14 15:44:31,056 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-14 15:44:31,056 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-14 15:44:31,056 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-14 15:44:31,056 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-14 15:44:31,056 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-14 15:44:31,057 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-14 15:44:31,057 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-14 15:44:31,057 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-14 15:44:31,057 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-14 15:44:31,057 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-14 15:44:31,057 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-14 15:44:31,057 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-14 15:44:31,058 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-14 15:44:31,058 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-14 15:44:31,058 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-14 15:44:31,058 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-14 15:44:31,059 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 09d600be73ca435c113b9c0e8e087d96a910d62ea2126c235d6963c00b3a91c2 [2022-07-14 15:44:31,276 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-14 15:44:31,290 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-14 15:44:31,293 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-14 15:44:31,293 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-14 15:44:31,294 INFO L275 PluginConnector]: CDTParser initialized [2022-07-14 15:44:31,295 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c [2022-07-14 15:44:31,369 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b29a54f5d/7212898164204cb59184447a0a9a2776/FLAG9d3c8b1f0 [2022-07-14 15:44:31,782 INFO L306 CDTParser]: Found 1 translation units. [2022-07-14 15:44:31,783 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c [2022-07-14 15:44:31,808 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b29a54f5d/7212898164204cb59184447a0a9a2776/FLAG9d3c8b1f0 [2022-07-14 15:44:32,090 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b29a54f5d/7212898164204cb59184447a0a9a2776 [2022-07-14 15:44:32,093 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-14 15:44:32,094 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-14 15:44:32,095 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-14 15:44:32,095 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-14 15:44:32,106 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-14 15:44:32,106 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,107 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@53ec5c50 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32, skipping insertion in model container [2022-07-14 15:44:32,107 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,112 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-14 15:44:32,164 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-14 15:44:32,340 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c[27470,27483] [2022-07-14 15:44:32,436 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 15:44:32,454 INFO L203 MainTranslator]: Completed pre-run [2022-07-14 15:44:32,502 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c[27470,27483] [2022-07-14 15:44:32,536 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 15:44:32,553 INFO L208 MainTranslator]: Completed translation [2022-07-14 15:44:32,554 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32 WrapperNode [2022-07-14 15:44:32,554 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-14 15:44:32,555 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-14 15:44:32,555 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-14 15:44:32,555 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-14 15:44:32,565 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,582 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,681 INFO L137 Inliner]: procedures = 90, calls = 333, calls flagged for inlining = 186, calls inlined = 270, statements flattened = 8466 [2022-07-14 15:44:32,681 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-14 15:44:32,682 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-14 15:44:32,682 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-14 15:44:32,682 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-14 15:44:32,688 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,688 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,699 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,699 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,737 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,783 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,805 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,830 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-14 15:44:32,830 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-14 15:44:32,831 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-14 15:44:32,831 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-14 15:44:32,839 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (1/1) ... [2022-07-14 15:44:32,844 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:44:32,851 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:44:32,863 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:44:32,897 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-14 15:44:32,933 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-14 15:44:32,934 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-14 15:44:32,934 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-14 15:44:32,934 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-14 15:44:33,100 INFO L234 CfgBuilder]: Building ICFG [2022-07-14 15:44:33,101 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-14 15:44:35,465 INFO L275 CfgBuilder]: Performing block encoding [2022-07-14 15:44:35,487 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-14 15:44:35,487 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-14 15:44:35,492 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 03:44:35 BoogieIcfgContainer [2022-07-14 15:44:35,492 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-14 15:44:35,493 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-14 15:44:35,493 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-14 15:44:35,495 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-14 15:44:35,496 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:44:35,496 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 14.07 03:44:32" (1/3) ... [2022-07-14 15:44:35,497 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@45ccc921 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 14.07 03:44:35, skipping insertion in model container [2022-07-14 15:44:35,497 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:44:35,497 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:44:32" (2/3) ... [2022-07-14 15:44:35,497 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@45ccc921 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 14.07 03:44:35, skipping insertion in model container [2022-07-14 15:44:35,497 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:44:35,498 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 03:44:35" (3/3) ... [2022-07-14 15:44:35,498 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product17.cil.c [2022-07-14 15:44:35,635 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-14 15:44:35,635 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-14 15:44:35,635 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-14 15:44:35,635 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-14 15:44:35,635 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-14 15:44:35,635 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-14 15:44:35,635 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-14 15:44:35,636 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-14 15:44:35,667 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2462 states, 2461 states have (on average 1.8687525396180416) internal successors, (4599), 2461 states have internal predecessors, (4599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:35,776 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1183 [2022-07-14 15:44:35,777 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:35,777 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:35,800 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:35,801 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:35,801 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-14 15:44:35,806 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2462 states, 2461 states have (on average 1.8687525396180416) internal successors, (4599), 2461 states have internal predecessors, (4599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:35,833 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1183 [2022-07-14 15:44:35,834 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:35,834 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:35,842 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:35,842 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:35,857 INFO L752 eck$LassoCheckResult]: Stem: 533#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 2349#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 126#L1138true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2037#L1131true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 412#L1146true main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 2066#L3215true assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1069#L3190true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2205#L2619true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1369#L3272true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 614#L3297true bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1165#L414true assume 0 == initPersonOnFloor_~floor#1; 1323#L415true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 577#L522-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 961#L2626true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1228#L2638-2true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 595#L206true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 13#L218-2true assume { :end_inline_callOnFloor } true; 1648#L558true assume { :end_inline_initPersonOnFloor } true; 1510#L2995true assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 878#L3272-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1009#L3297-1true angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 471#L414-1true assume 0 == initPersonOnFloor_~floor#1; 1984#L415-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1274#L522-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1390#L2626-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1218#L2638-5true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1584#L206-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1512#L218-5true assume { :end_inline_callOnFloor } true; 1630#L558-1true assume { :end_inline_initPersonOnFloor } true; 983#L2962true assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 200#L138true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 724#L165true stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 2029#L1999true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 2111#L2011true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 546#L2148true assume !(0 != timeShift_~tmp___9~2#1); 1146#L2239true assume !(1 == ~doorState~0); 96#L2239-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1834#L1590true assume !(1 == stopRequestedInDirection_~dir#1); 272#L1759true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1486#L1912true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1641#L2247true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 2000#L1966true assume !(1 == ~currentHeading~0); 1170#L1976true assume !(0 == ~currentFloorID~0); 717#L1976-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 262#L1982-1true assume { :end_inline_continueInDirection } true; 779#L2256-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 315#L1386true __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 2069#L2664true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2305#L2665true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1248#L1395true __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1929#L2669true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 706#L2724true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 773#L2271true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 942#L3022-2true [2022-07-14 15:44:35,858 INFO L754 eck$LassoCheckResult]: Loop: 942#L3022-2true assume !false; 1381#L3023true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 78#L3026true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1913#L1233true cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 712#L3030true assume 1 != cleanup_~tmp___0~9#1; 184#L3030-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1597#L138-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416#L165-21true anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1445#L1494true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1366#L1558true isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1447#L1571true cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 444#L3042true assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 904#L138-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 228#L165-26true stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 697#L1999-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1338#L2011-1true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1675#L2148-2true assume !(0 != timeShift_~tmp___9~2#1); 538#L2239-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1730#L2239-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2109#L1590-2true assume !(1 == stopRequestedInDirection_~dir#1); 2171#L1759-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 326#L1912-2true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1023#L2247-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 37#L1966-3true assume !(1 == ~currentHeading~0); 2100#L1976-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 689#L1976-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 738#L1982-7true assume { :end_inline_continueInDirection } true; 859#L2256-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2098#L1386-1true __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 160#L2664-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1290#L2665-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1056#L1395-5true __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 263#L2669-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1169#L2724-1true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1444#L2271-1true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 942#L3022-2true [2022-07-14 15:44:35,865 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:35,866 INFO L85 PathProgramCache]: Analyzing trace with hash 890086623, now seen corresponding path program 1 times [2022-07-14 15:44:35,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:35,873 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1515258802] [2022-07-14 15:44:35,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:35,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:36,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:36,103 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:36,104 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:36,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1515258802] [2022-07-14 15:44:36,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1515258802] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:36,105 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:36,106 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:36,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006224734] [2022-07-14 15:44:36,109 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:36,112 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:36,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:36,113 INFO L85 PathProgramCache]: Analyzing trace with hash -104025897, now seen corresponding path program 1 times [2022-07-14 15:44:36,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:36,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1036408352] [2022-07-14 15:44:36,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:36,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:36,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:36,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:36,149 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:36,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1036408352] [2022-07-14 15:44:36,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1036408352] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:36,149 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:36,150 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:44:36,150 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [769297216] [2022-07-14 15:44:36,150 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:36,151 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:36,155 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:36,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:44:36,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:44:36,186 INFO L87 Difference]: Start difference. First operand has 2462 states, 2461 states have (on average 1.8687525396180416) internal successors, (4599), 2461 states have internal predecessors, (4599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:36,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:36,540 INFO L93 Difference]: Finished difference Result 4393 states and 8102 transitions. [2022-07-14 15:44:36,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-14 15:44:36,545 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4393 states and 8102 transitions. [2022-07-14 15:44:36,572 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2149 [2022-07-14 15:44:36,605 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4393 states to 4285 states and 7990 transitions. [2022-07-14 15:44:36,606 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4285 [2022-07-14 15:44:36,612 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4285 [2022-07-14 15:44:36,613 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4285 states and 7990 transitions. [2022-07-14 15:44:36,624 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:36,624 INFO L369 hiAutomatonCegarLoop]: Abstraction has 4285 states and 7990 transitions. [2022-07-14 15:44:36,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4285 states and 7990 transitions. [2022-07-14 15:44:36,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4285 to 2443. [2022-07-14 15:44:36,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2443 states, 2443 states have (on average 1.8706508391322145) internal successors, (4570), 2442 states have internal predecessors, (4570), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:36,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2443 states to 2443 states and 4570 transitions. [2022-07-14 15:44:36,709 INFO L392 hiAutomatonCegarLoop]: Abstraction has 2443 states and 4570 transitions. [2022-07-14 15:44:36,709 INFO L374 stractBuchiCegarLoop]: Abstraction has 2443 states and 4570 transitions. [2022-07-14 15:44:36,709 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-14 15:44:36,709 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2443 states and 4570 transitions. [2022-07-14 15:44:36,718 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1185 [2022-07-14 15:44:36,718 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:36,718 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:36,720 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:36,720 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:36,721 INFO L752 eck$LassoCheckResult]: Stem: 7940#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 7941#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 7189#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7190#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 7742#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 7743#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 8636#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 8637#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 8916#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 7888#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8059#L414 assume 0 == initPersonOnFloor_~floor#1; 8739#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7034#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8010#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 7902#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8029#L206 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6917#L218-2 assume { :end_inline_callOnFloor } true; 6918#L558 assume { :end_inline_initPersonOnFloor } true; 9004#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 8431#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 6931#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7833#L414-1 assume 0 == initPersonOnFloor_~floor#1; 7834#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7320#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8841#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 7882#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8784#L206-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7762#L218-5 assume { :end_inline_callOnFloor } true; 9005#L558-1 assume { :end_inline_initPersonOnFloor } true; 8545#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 7347#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 7348#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 8212#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 8569#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 7050#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 8594#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 8596#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 9328#L2148 assume !(0 != timeShift_~tmp___9~2#1); 8721#L2239 assume !(1 == ~doorState~0); 7125#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 7126#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 7488#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 7275#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 8987#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 9086#L1966 assume !(1 == ~currentHeading~0); 8742#L1976 assume !(0 == ~currentFloorID~0); 7602#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7471#L1982-1 assume { :end_inline_continueInDirection } true; 7472#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 7570#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 7571#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 9266#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 8820#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 8821#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 7152#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8188#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 8283#L3022-2 [2022-07-14 15:44:36,721 INFO L754 eck$LassoCheckResult]: Loop: 8283#L3022-2 assume !false; 8502#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 7085#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 7086#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 8195#L3030 assume 1 != cleanup_~tmp___0~9#1; 7315#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 7316#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 8335#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 8940#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 6937#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 8914#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 7789#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 7790#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 7156#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 7406#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 8175#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 7220#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 7221#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 8984#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 9327#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 7947#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 7948#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 9130#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 9274#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 7234#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 7588#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 6980#L1966-3 assume !(1 == ~currentHeading~0); 6981#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8162#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8163#L1982-7 assume { :end_inline_continueInDirection } true; 8233#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 8408#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 7269#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 7270#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 8618#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 7473#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 7474#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8741#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 8283#L3022-2 [2022-07-14 15:44:36,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:36,722 INFO L85 PathProgramCache]: Analyzing trace with hash -1832573218, now seen corresponding path program 1 times [2022-07-14 15:44:36,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:36,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [638612542] [2022-07-14 15:44:36,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:36,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:36,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:36,775 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:36,776 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:36,776 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [638612542] [2022-07-14 15:44:36,776 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [638612542] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:36,776 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:36,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:36,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1033107943] [2022-07-14 15:44:36,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:36,777 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:36,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:36,778 INFO L85 PathProgramCache]: Analyzing trace with hash 1172263178, now seen corresponding path program 1 times [2022-07-14 15:44:36,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:36,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1965557112] [2022-07-14 15:44:36,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:36,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:36,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:36,873 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:36,874 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:36,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1965557112] [2022-07-14 15:44:36,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1965557112] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:36,883 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:36,883 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:44:36,883 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495434560] [2022-07-14 15:44:36,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:36,884 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:36,884 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:36,884 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 15:44:36,884 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-14 15:44:36,885 INFO L87 Difference]: Start difference. First operand 2443 states and 4570 transitions. cyclomatic complexity: 2128 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:38,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:38,479 INFO L93 Difference]: Finished difference Result 22481 states and 41926 transitions. [2022-07-14 15:44:38,479 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-07-14 15:44:38,480 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22481 states and 41926 transitions. [2022-07-14 15:44:38,664 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14810 [2022-07-14 15:44:38,774 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22481 states to 22481 states and 41926 transitions. [2022-07-14 15:44:38,774 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22481 [2022-07-14 15:44:38,798 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22481 [2022-07-14 15:44:38,798 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22481 states and 41926 transitions. [2022-07-14 15:44:38,821 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:38,821 INFO L369 hiAutomatonCegarLoop]: Abstraction has 22481 states and 41926 transitions. [2022-07-14 15:44:38,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22481 states and 41926 transitions. [2022-07-14 15:44:38,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22481 to 4832. [2022-07-14 15:44:38,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4832 states, 4832 states have (on average 1.8700331125827814) internal successors, (9036), 4831 states have internal predecessors, (9036), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:39,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4832 states to 4832 states and 9036 transitions. [2022-07-14 15:44:39,057 INFO L392 hiAutomatonCegarLoop]: Abstraction has 4832 states and 9036 transitions. [2022-07-14 15:44:39,057 INFO L374 stractBuchiCegarLoop]: Abstraction has 4832 states and 9036 transitions. [2022-07-14 15:44:39,057 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-14 15:44:39,057 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4832 states and 9036 transitions. [2022-07-14 15:44:39,075 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2376 [2022-07-14 15:44:39,075 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:39,075 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:39,078 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:39,078 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:39,079 INFO L752 eck$LassoCheckResult]: Stem: 32927#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 32928#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 32161#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 32162#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 32726#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 32727#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 33665#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 33666#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 33961#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 32875#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 33051#L414 assume 0 == initPersonOnFloor_~floor#1; 33770#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 32005#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 33001#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 32889#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 33021#L206 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 31888#L218-2 assume { :end_inline_callOnFloor } true; 31889#L558 assume { :end_inline_initPersonOnFloor } true; 34065#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 33443#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 31902#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 32820#L414-1 assume 0 == initPersonOnFloor_~floor#1; 32821#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 33879#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 33880#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 33818#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 33819#L206-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 32746#L218-5 assume { :end_inline_callOnFloor } true; 34158#L558-1 assume { :end_inline_initPersonOnFloor } true; 34159#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 32320#L138 assume !(0 == isFloorCalling_~floorID#1); 32322#L142 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 34641#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 34640#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 34638#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 34634#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 34633#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 34632#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 34630#L2148 assume !(0 != timeShift_~tmp___9~2#1); 34629#L2239 assume !(1 == ~doorState~0); 34628#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 34626#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 32465#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 32248#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 34048#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 34166#L1966 assume !(1 == ~currentHeading~0); 34349#L1976 assume !(0 == ~currentFloorID~0); 33199#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 33200#L1982-1 assume { :end_inline_continueInDirection } true; 34596#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 34595#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 34594#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 34592#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 34589#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 34580#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 34574#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 34572#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 34571#L3022-2 [2022-07-14 15:44:39,080 INFO L754 eck$LassoCheckResult]: Loop: 34571#L3022-2 assume !false; 34570#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 34569#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 34568#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 34567#L3030 assume 1 != cleanup_~tmp___0~9#1; 34527#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 34129#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 33992#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 33993#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 34015#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 34528#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 34524#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 33472#L138-26 assume !(0 == isFloorCalling_~floorID#1); 33473#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 35709#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 35708#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 35706#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 35702#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 35701#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 35700#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 35698#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 35697#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 35696#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 35695#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 34404#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 32207#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 35660#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 31951#L1966-3 assume !(1 == ~currentHeading~0); 31952#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 33161#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 33162#L1982-7 assume { :end_inline_continueInDirection } true; 35648#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 35647#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 35645#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 35643#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 35642#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 35636#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 35630#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 34573#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 34571#L3022-2 [2022-07-14 15:44:39,083 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:39,083 INFO L85 PathProgramCache]: Analyzing trace with hash 486393081, now seen corresponding path program 1 times [2022-07-14 15:44:39,083 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:39,084 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1297406278] [2022-07-14 15:44:39,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:39,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:39,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:39,134 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:39,135 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:39,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1297406278] [2022-07-14 15:44:39,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1297406278] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:39,135 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:39,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:39,136 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [654011334] [2022-07-14 15:44:39,136 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:39,136 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:39,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:39,137 INFO L85 PathProgramCache]: Analyzing trace with hash 103439857, now seen corresponding path program 1 times [2022-07-14 15:44:39,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:39,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [547372455] [2022-07-14 15:44:39,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:39,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:39,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:39,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:39,172 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:39,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [547372455] [2022-07-14 15:44:39,172 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [547372455] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:39,173 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:39,173 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:44:39,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232303819] [2022-07-14 15:44:39,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:39,174 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:39,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:39,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 15:44:39,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-14 15:44:39,175 INFO L87 Difference]: Start difference. First operand 4832 states and 9036 transitions. cyclomatic complexity: 4205 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:41,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:41,430 INFO L93 Difference]: Finished difference Result 16752 states and 31227 transitions. [2022-07-14 15:44:41,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-07-14 15:44:41,432 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16752 states and 31227 transitions. [2022-07-14 15:44:41,532 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8911 [2022-07-14 15:44:41,582 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16752 states to 16752 states and 31227 transitions. [2022-07-14 15:44:41,583 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16752 [2022-07-14 15:44:41,598 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16752 [2022-07-14 15:44:41,599 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16752 states and 31227 transitions. [2022-07-14 15:44:41,614 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:41,615 INFO L369 hiAutomatonCegarLoop]: Abstraction has 16752 states and 31227 transitions. [2022-07-14 15:44:41,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16752 states and 31227 transitions. [2022-07-14 15:44:41,770 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16752 to 8582. [2022-07-14 15:44:41,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8582 states, 8582 states have (on average 1.867047308319739) internal successors, (16023), 8581 states have internal predecessors, (16023), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:41,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8582 states to 8582 states and 16023 transitions. [2022-07-14 15:44:41,803 INFO L392 hiAutomatonCegarLoop]: Abstraction has 8582 states and 16023 transitions. [2022-07-14 15:44:41,803 INFO L374 stractBuchiCegarLoop]: Abstraction has 8582 states and 16023 transitions. [2022-07-14 15:44:41,804 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-14 15:44:41,804 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8582 states and 16023 transitions. [2022-07-14 15:44:41,825 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4303 [2022-07-14 15:44:41,826 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:41,826 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:41,829 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:41,829 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:41,829 INFO L752 eck$LassoCheckResult]: Stem: 54579#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 54580#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 53803#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 53804#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 54375#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 54376#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 55317#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 55318#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 55631#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 54526#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 54701#L414 assume 0 == initPersonOnFloor_~floor#1; 55428#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 53645#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 54652#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 54541#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 54671#L206 assume !(0 == callOnFloor_~floorID#1); 54672#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 54905#L218-2 assume { :end_inline_callOnFloor } true; 56252#L558 assume { :end_inline_initPersonOnFloor } true; 56251#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 56247#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 56244#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 56242#L414-1 assume 0 == initPersonOnFloor_~floor#1; 56035#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 53936#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 55640#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 54520#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 55792#L206-2 assume !(0 == callOnFloor_~floorID#1); 55793#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 55738#L218-5 assume { :end_inline_callOnFloor } true; 55739#L558-1 assume { :end_inline_initPersonOnFloor } true; 55216#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 55217#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 56207#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 56312#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 56311#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 53661#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 55273#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 55275#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 56308#L2148 assume !(0 != timeShift_~tmp___9~2#1); 55409#L2239 assume !(1 == ~doorState~0); 53736#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 53737#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 55962#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 53984#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 55719#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 55840#L1966 assume !(1 == ~currentHeading~0); 56043#L1976 assume !(0 == ~currentFloorID~0); 54230#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54093#L1982-1 assume { :end_inline_continueInDirection } true; 54094#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 54198#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 54199#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 56074#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 55521#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 55522#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 53765#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 54836#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 54934#L3022-2 [2022-07-14 15:44:41,831 INFO L754 eck$LassoCheckResult]: Loop: 54934#L3022-2 assume !false; 55170#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 53696#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 53697#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 56310#L3030 assume 1 != cleanup_~tmp___0~9#1; 56307#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 56302#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 56288#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 56279#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 56268#L1498 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 56263#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 56262#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 56261#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 56260#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 56259#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 56258#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 56257#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 53834#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 53835#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 55715#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 56309#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 54587#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 54588#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 55893#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 56086#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 53968#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 54216#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 53591#L1966-3 assume !(1 == ~currentHeading~0); 53592#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54809#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 54810#L1982-7 assume { :end_inline_continueInDirection } true; 54883#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 55065#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 53884#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 53885#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 55299#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 54095#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 54096#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 55430#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 54934#L3022-2 [2022-07-14 15:44:41,831 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:41,831 INFO L85 PathProgramCache]: Analyzing trace with hash -1883399384, now seen corresponding path program 1 times [2022-07-14 15:44:41,832 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:41,832 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [697167278] [2022-07-14 15:44:41,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:41,832 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:41,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:41,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:41,872 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:41,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [697167278] [2022-07-14 15:44:41,872 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [697167278] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:41,872 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:41,872 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:41,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1632428423] [2022-07-14 15:44:41,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:41,874 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:41,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:41,875 INFO L85 PathProgramCache]: Analyzing trace with hash -1695734066, now seen corresponding path program 1 times [2022-07-14 15:44:41,876 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:41,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1461661398] [2022-07-14 15:44:41,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:41,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:41,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:41,897 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:41,897 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:41,897 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1461661398] [2022-07-14 15:44:41,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1461661398] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:41,897 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:41,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:44:41,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [373933864] [2022-07-14 15:44:41,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:41,898 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:41,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:41,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:44:41,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:44:41,900 INFO L87 Difference]: Start difference. First operand 8582 states and 16023 transitions. cyclomatic complexity: 7442 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:42,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:42,261 INFO L93 Difference]: Finished difference Result 33116 states and 61799 transitions. [2022-07-14 15:44:42,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:44:42,262 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33116 states and 61799 transitions. [2022-07-14 15:44:42,464 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21777 [2022-07-14 15:44:42,585 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33116 states to 33116 states and 61799 transitions. [2022-07-14 15:44:42,585 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33116 [2022-07-14 15:44:42,638 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33116 [2022-07-14 15:44:42,639 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33116 states and 61799 transitions. [2022-07-14 15:44:42,669 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:42,670 INFO L369 hiAutomatonCegarLoop]: Abstraction has 33116 states and 61799 transitions. [2022-07-14 15:44:42,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33116 states and 61799 transitions. [2022-07-14 15:44:42,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33116 to 15475. [2022-07-14 15:44:42,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15475 states, 15475 states have (on average 1.8663004846526656) internal successors, (28881), 15474 states have internal predecessors, (28881), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:43,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15475 states to 15475 states and 28881 transitions. [2022-07-14 15:44:43,021 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15475 states and 28881 transitions. [2022-07-14 15:44:43,021 INFO L374 stractBuchiCegarLoop]: Abstraction has 15475 states and 28881 transitions. [2022-07-14 15:44:43,021 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-14 15:44:43,021 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15475 states and 28881 transitions. [2022-07-14 15:44:43,062 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8480 [2022-07-14 15:44:43,063 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:43,063 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:43,067 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:43,068 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:43,068 INFO L752 eck$LassoCheckResult]: Stem: 96300#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 96301#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 95520#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 95521#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 96091#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 96092#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 97053#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 97054#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 97376#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 96248#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 96427#L414 assume 0 == initPersonOnFloor_~floor#1; 97164#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 95364#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 96375#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 96262#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 96396#L206 assume !(0 == callOnFloor_~floorID#1); 96397#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 96639#L218-2 assume { :end_inline_callOnFloor } true; 98037#L558 assume { :end_inline_initPersonOnFloor } true; 98036#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 98032#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 98029#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 98027#L414-1 assume 0 == initPersonOnFloor_~floor#1; 97799#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 95652#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 97388#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 96243#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 97552#L206-2 assume !(0 == callOnFloor_~floorID#1); 97553#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 97493#L218-5 assume { :end_inline_callOnFloor } true; 97494#L558-1 assume { :end_inline_initPersonOnFloor } true; 96950#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 96951#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 97992#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 97991#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 97988#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 97989#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 98077#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 98076#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 98075#L2148 assume !(0 != timeShift_~tmp___9~2#1); 98074#L2239 assume !(1 == ~doorState~0); 98073#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 98071#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 98068#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 98069#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 98354#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 98355#L1966 assume !(1 == ~currentHeading~0); 98414#L1976 assume !(0 == ~currentFloorID~0); 95949#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 95811#L1982-1 assume { :end_inline_continueInDirection } true; 95812#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 95913#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 95914#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 97843#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 97937#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 109140#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 96565#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 96566#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 109133#L3022-2 [2022-07-14 15:44:43,068 INFO L754 eck$LassoCheckResult]: Loop: 109133#L3022-2 assume !false; 109132#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 109131#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 109130#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 109129#L3030 assume 1 != cleanup_~tmp___0~9#1; 109128#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 109127#L138-21 assume !(0 == isFloorCalling_~floorID#1); 97835#L142-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 96728#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 97406#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 95261#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 98276#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 98251#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 98248#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 98245#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 98230#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 98227#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 98220#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 98221#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 98213#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 98214#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 98207#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 98203#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 98204#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 98176#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 98166#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 98160#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 98162#L1966-3 assume !(1 == ~currentHeading~0); 98281#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 96537#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 96538#L1982-7 assume { :end_inline_continueInDirection } true; 109764#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 109762#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 109760#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 109759#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 109758#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 109754#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 109748#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 109134#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 109133#L3022-2 [2022-07-14 15:44:43,075 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:43,076 INFO L85 PathProgramCache]: Analyzing trace with hash -1883399384, now seen corresponding path program 2 times [2022-07-14 15:44:43,076 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:43,076 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326269655] [2022-07-14 15:44:43,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:43,076 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:43,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:43,118 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:43,119 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:43,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326269655] [2022-07-14 15:44:43,119 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326269655] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:43,119 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:43,119 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:43,119 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1209316726] [2022-07-14 15:44:43,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:43,120 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:43,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:43,120 INFO L85 PathProgramCache]: Analyzing trace with hash 253533667, now seen corresponding path program 1 times [2022-07-14 15:44:43,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:43,121 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [362069980] [2022-07-14 15:44:43,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:43,121 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:43,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:43,133 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:43,133 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:43,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [362069980] [2022-07-14 15:44:43,134 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [362069980] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:43,134 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:43,134 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:43,134 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442631387] [2022-07-14 15:44:43,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:43,135 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:43,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:43,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:44:43,135 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:44:43,136 INFO L87 Difference]: Start difference. First operand 15475 states and 28881 transitions. cyclomatic complexity: 13407 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:43,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:43,546 INFO L93 Difference]: Finished difference Result 16864 states and 31248 transitions. [2022-07-14 15:44:43,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:44:43,546 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16864 states and 31248 transitions. [2022-07-14 15:44:43,614 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9236 [2022-07-14 15:44:43,666 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16864 states to 16864 states and 31248 transitions. [2022-07-14 15:44:43,666 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16864 [2022-07-14 15:44:43,790 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16864 [2022-07-14 15:44:43,790 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16864 states and 31248 transitions. [2022-07-14 15:44:43,800 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:43,819 INFO L369 hiAutomatonCegarLoop]: Abstraction has 16864 states and 31248 transitions. [2022-07-14 15:44:43,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16864 states and 31248 transitions. [2022-07-14 15:44:44,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16864 to 15247. [2022-07-14 15:44:44,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15247 states, 15247 states have (on average 1.8631206138912573) internal successors, (28407), 15246 states have internal predecessors, (28407), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:44,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15247 states to 15247 states and 28407 transitions. [2022-07-14 15:44:44,076 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15247 states and 28407 transitions. [2022-07-14 15:44:44,076 INFO L374 stractBuchiCegarLoop]: Abstraction has 15247 states and 28407 transitions. [2022-07-14 15:44:44,076 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-14 15:44:44,076 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15247 states and 28407 transitions. [2022-07-14 15:44:44,114 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8300 [2022-07-14 15:44:44,114 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:44,114 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:44,123 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:44,123 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:44,124 INFO L752 eck$LassoCheckResult]: Stem: 128618#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 128619#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 127863#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 127864#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 128417#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 128418#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 129345#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 129346#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 129649#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 128565#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 128739#L414 assume 0 == initPersonOnFloor_~floor#1; 129454#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 127710#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 128689#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 128580#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 128709#L206 assume !(0 == callOnFloor_~floorID#1); 128710#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 128948#L218-2 assume { :end_inline_callOnFloor } true; 130266#L558 assume { :end_inline_initPersonOnFloor } true; 130265#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 130261#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 130258#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 130256#L414-1 assume 0 == initPersonOnFloor_~floor#1; 130050#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 127993#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 129658#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 128559#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 129812#L206-2 assume !(0 == callOnFloor_~floorID#1); 129813#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 129755#L218-5 assume { :end_inline_callOnFloor } true; 129756#L558-1 assume { :end_inline_initPersonOnFloor } true; 129248#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 129249#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 130222#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 130220#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 130217#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 130218#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 130392#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 130391#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 130389#L2148 assume !(0 != timeShift_~tmp___9~2#1); 130388#L2239 assume !(1 == ~doorState~0); 130387#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 130385#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 130376#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 130356#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 130345#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 130335#L1966 assume !(1 == ~currentHeading~0); 130325#L1976 assume !(0 == ~currentFloorID~0); 130314#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 130310#L1982-1 assume { :end_inline_continueInDirection } true; 130309#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 130307#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 130305#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 130304#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 130303#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 130282#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 130275#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 130273#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 130272#L3022-2 [2022-07-14 15:44:44,124 INFO L754 eck$LassoCheckResult]: Loop: 130272#L3022-2 assume !false; 130271#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 130270#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 130269#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 130215#L3030 assume 1 != cleanup_~tmp___0~9#1; 130216#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 130209#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 130210#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 130204#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 130205#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 133255#L138-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 129950#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 129951#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 127613#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 142174#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 141549#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 141550#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 142154#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 142153#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 130175#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 127893#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 127894#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 129729#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 142193#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 128625#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 128626#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 142772#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 142773#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 128025#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 142621#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 142620#L1966-3 assume !(1 == ~currentHeading~0); 142614#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 142609#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 142602#L1982-7 assume { :end_inline_continueInDirection } true; 142495#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 132571#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 132569#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 132570#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 132566#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 130293#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 130276#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 130274#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 130272#L3022-2 [2022-07-14 15:44:44,125 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:44,125 INFO L85 PathProgramCache]: Analyzing trace with hash -1883399384, now seen corresponding path program 3 times [2022-07-14 15:44:44,125 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:44,125 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494640445] [2022-07-14 15:44:44,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:44,125 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:44,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:44,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:44,165 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:44,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494640445] [2022-07-14 15:44:44,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494640445] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:44,166 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:44,166 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:44,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1903193167] [2022-07-14 15:44:44,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:44,170 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:44,170 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:44,172 INFO L85 PathProgramCache]: Analyzing trace with hash -398723998, now seen corresponding path program 1 times [2022-07-14 15:44:44,172 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:44,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1621561865] [2022-07-14 15:44:44,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:44,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:44,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:44,191 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:44,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:44,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1621561865] [2022-07-14 15:44:44,194 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1621561865] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:44,194 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:44,194 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:44:44,194 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [356564644] [2022-07-14 15:44:44,194 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:44,194 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:44,195 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:44,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:44:44,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:44:44,196 INFO L87 Difference]: Start difference. First operand 15247 states and 28407 transitions. cyclomatic complexity: 13161 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:44,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:44,666 INFO L93 Difference]: Finished difference Result 16610 states and 30698 transitions. [2022-07-14 15:44:44,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-14 15:44:44,666 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16610 states and 30698 transitions. [2022-07-14 15:44:44,727 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9046 [2022-07-14 15:44:44,769 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16610 states to 16610 states and 30698 transitions. [2022-07-14 15:44:44,770 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16610 [2022-07-14 15:44:44,862 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16610 [2022-07-14 15:44:44,871 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16610 states and 30698 transitions. [2022-07-14 15:44:44,904 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:44,904 INFO L369 hiAutomatonCegarLoop]: Abstraction has 16610 states and 30698 transitions. [2022-07-14 15:44:44,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16610 states and 30698 transitions. [2022-07-14 15:44:45,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16610 to 15247. [2022-07-14 15:44:45,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15247 states, 15247 states have (on average 1.8536761330097724) internal successors, (28263), 15246 states have internal predecessors, (28263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:45,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15247 states to 15247 states and 28263 transitions. [2022-07-14 15:44:45,098 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15247 states and 28263 transitions. [2022-07-14 15:44:45,098 INFO L374 stractBuchiCegarLoop]: Abstraction has 15247 states and 28263 transitions. [2022-07-14 15:44:45,098 INFO L287 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-07-14 15:44:45,099 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15247 states and 28263 transitions. [2022-07-14 15:44:45,141 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8300 [2022-07-14 15:44:45,141 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:45,141 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:45,145 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:45,145 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:45,145 INFO L752 eck$LassoCheckResult]: Stem: 160498#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 160499#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 159736#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 159737#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 160295#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 160296#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 161243#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 161244#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 161551#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 160444#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 160627#L414 assume 0 == initPersonOnFloor_~floor#1; 161355#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 159584#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 160572#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 160461#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 160597#L206 assume !(0 == callOnFloor_~floorID#1); 160598#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 160834#L218-2 assume { :end_inline_callOnFloor } true; 162249#L558 assume { :end_inline_initPersonOnFloor } true; 162248#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 162244#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 162241#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 162239#L414-1 assume 0 == initPersonOnFloor_~floor#1; 161978#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 159866#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 161564#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 160438#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 161726#L206-2 assume !(0 == callOnFloor_~floorID#1); 161727#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 161661#L218-5 assume { :end_inline_callOnFloor } true; 161662#L558-1 assume { :end_inline_initPersonOnFloor } true; 161143#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 161144#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 162205#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 162204#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 162203#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 159600#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 161199#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 161201#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 162197#L2148 assume !(0 != timeShift_~tmp___9~2#1); 162198#L2239 assume !(1 == ~doorState~0); 173664#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 173661#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 173594#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 173583#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 173581#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 173582#L1966 assume !(1 == ~currentHeading~0); 173691#L1976 assume !(0 == ~currentFloorID~0); 173396#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 168682#L1982-1 assume { :end_inline_continueInDirection } true; 168680#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 168679#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 168678#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 168677#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 168674#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 168653#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 168646#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 168644#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 168643#L3022-2 [2022-07-14 15:44:45,145 INFO L754 eck$LassoCheckResult]: Loop: 168643#L3022-2 assume !false; 162275#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 162267#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 162202#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 162199#L3030 assume 1 != cleanup_~tmp___0~9#1; 162196#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 162195#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 162194#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 162191#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 162192#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 162285#L138-22 assume !(0 == isFloorCalling_~floorID#1); 162306#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 161870#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 161871#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 162280#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 162279#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 162278#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 162276#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 162273#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 162268#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 162143#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 162144#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 172328#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 172327#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 172320#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 172321#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 173102#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 173101#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 173043#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 173029#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 173024#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 173023#L1966-3 assume !(1 == ~currentHeading~0); 170704#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 170701#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 170666#L1982-7 assume { :end_inline_continueInDirection } true; 170665#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 170664#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 170661#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 170662#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 170663#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 168664#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 168647#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 168645#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 168643#L3022-2 [2022-07-14 15:44:45,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:45,146 INFO L85 PathProgramCache]: Analyzing trace with hash -1883399384, now seen corresponding path program 4 times [2022-07-14 15:44:45,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:45,146 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [880227655] [2022-07-14 15:44:45,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:45,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:45,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:45,265 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:45,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:45,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [880227655] [2022-07-14 15:44:45,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [880227655] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:45,266 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:45,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:45,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1254936323] [2022-07-14 15:44:45,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:45,266 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:45,266 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:45,266 INFO L85 PathProgramCache]: Analyzing trace with hash -783731834, now seen corresponding path program 1 times [2022-07-14 15:44:45,267 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:45,267 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [691127164] [2022-07-14 15:44:45,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:45,267 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:45,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:45,284 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:45,284 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:45,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [691127164] [2022-07-14 15:44:45,284 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [691127164] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:45,285 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:45,285 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:44:45,285 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [230185610] [2022-07-14 15:44:45,285 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:45,285 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:45,285 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:45,286 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:44:45,286 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:44:45,286 INFO L87 Difference]: Start difference. First operand 15247 states and 28263 transitions. cyclomatic complexity: 13017 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:45,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:45,450 INFO L93 Difference]: Finished difference Result 23007 states and 42444 transitions. [2022-07-14 15:44:45,450 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:44:45,451 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23007 states and 42444 transitions. [2022-07-14 15:44:45,521 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15784 [2022-07-14 15:44:45,571 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23007 states to 23007 states and 42444 transitions. [2022-07-14 15:44:45,571 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23007 [2022-07-14 15:44:45,587 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23007 [2022-07-14 15:44:45,587 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23007 states and 42444 transitions. [2022-07-14 15:44:45,607 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:45,607 INFO L369 hiAutomatonCegarLoop]: Abstraction has 23007 states and 42444 transitions. [2022-07-14 15:44:45,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23007 states and 42444 transitions. [2022-07-14 15:44:45,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23007 to 15265. [2022-07-14 15:44:45,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15265 states, 15265 states have (on average 1.8526695054045201) internal successors, (28281), 15264 states have internal predecessors, (28281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:45,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15265 states to 15265 states and 28281 transitions. [2022-07-14 15:44:45,943 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15265 states and 28281 transitions. [2022-07-14 15:44:45,944 INFO L374 stractBuchiCegarLoop]: Abstraction has 15265 states and 28281 transitions. [2022-07-14 15:44:45,944 INFO L287 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-07-14 15:44:45,944 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15265 states and 28281 transitions. [2022-07-14 15:44:45,984 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8312 [2022-07-14 15:44:45,984 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:45,984 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:45,986 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:45,986 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:45,986 INFO L752 eck$LassoCheckResult]: Stem: 198776#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 198777#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 198002#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 198003#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 198571#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 198572#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 199526#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 199527#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 199851#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 198723#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 198900#L414 assume 0 == initPersonOnFloor_~floor#1; 199638#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 197850#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 198849#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 198739#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 198869#L206 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 197732#L218-2 assume { :end_inline_callOnFloor } true; 197733#L558 assume { :end_inline_initPersonOnFloor } true; 199965#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 199296#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 197749#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 198671#L414-1 assume 0 == initPersonOnFloor_~floor#1; 198672#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 199752#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 199753#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 199690#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 199691#L206-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 198594#L218-5 assume { :end_inline_callOnFloor } true; 200065#L558-1 assume { :end_inline_initPersonOnFloor } true; 200066#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 198161#L138 assume !(0 == isFloorCalling_~floorID#1); 198163#L142 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 199069#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 199070#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 199452#L1403 assume !(0 == buttonForFloorIsPressed_~floorID#1); 199453#L1407 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 202303#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 202302#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 202301#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 202299#L2148 assume !(0 != timeShift_~tmp___9~2#1); 199618#L2239 assume !(1 == ~doorState~0); 197938#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 197939#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 198309#L1759 assume !(0 == ~currentFloorID~0); 198310#L1765 assume !(~currentFloorID~0 > 0); 199052#L1780 assume ~currentFloorID~0 > 0; 207353#L1782 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 207352#L1783 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 199734#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 200553#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 200555#L1966 assume !(1 == ~currentHeading~0); 209667#L1976 assume !(0 == ~currentFloorID~0); 199050#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 199051#L1982-1 assume { :end_inline_continueInDirection } true; 209660#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 209659#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 209658#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 209656#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 209653#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 209644#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 209638#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 209636#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 209479#L3022-2 [2022-07-14 15:44:45,987 INFO L754 eck$LassoCheckResult]: Loop: 209479#L3022-2 assume !false; 209476#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 209472#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 209469#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 209461#L3030 assume 1 != cleanup_~tmp___0~9#1; 209448#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 209445#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 199881#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 199882#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 199849#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 199850#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 198623#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 198624#L138-26 assume !(0 == isFloorCalling_~floorID#1); 204981#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 204977#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 204976#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 204975#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 204974#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 204970#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 204968#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 204967#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 204966#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 200777#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 200760#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 200756#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 200755#L1759-2 assume !(0 == ~currentFloorID~0); 199215#L1765-2 assume !(~currentFloorID~0 > 0); 198119#L1780-2 assume ~currentFloorID~0 > 0; 198121#L1782-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 200747#L1783-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 200746#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 200829#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 212611#L1966-3 assume !(1 == ~currentHeading~0); 212609#L1976-9 assume !(0 == ~currentFloorID~0); 212607#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 212603#L1982-7 assume { :end_inline_continueInDirection } true; 212602#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 212601#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 212598#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 212599#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 212600#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 212586#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 209747#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 209637#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 209479#L3022-2 [2022-07-14 15:44:45,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:45,987 INFO L85 PathProgramCache]: Analyzing trace with hash 1802524055, now seen corresponding path program 1 times [2022-07-14 15:44:45,988 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:45,988 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [858116078] [2022-07-14 15:44:45,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:45,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:46,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:46,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:46,015 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:46,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [858116078] [2022-07-14 15:44:46,017 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [858116078] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:46,017 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:46,018 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:46,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1042218203] [2022-07-14 15:44:46,019 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:46,019 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:46,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:46,020 INFO L85 PathProgramCache]: Analyzing trace with hash -1178820411, now seen corresponding path program 1 times [2022-07-14 15:44:46,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:46,020 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2008648130] [2022-07-14 15:44:46,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:46,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:46,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:46,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:46,075 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:46,075 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2008648130] [2022-07-14 15:44:46,076 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2008648130] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:46,076 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:46,077 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:44:46,077 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1497886281] [2022-07-14 15:44:46,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:46,078 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:46,078 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:46,078 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:44:46,079 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:44:46,079 INFO L87 Difference]: Start difference. First operand 15265 states and 28281 transitions. cyclomatic complexity: 13017 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:47,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:47,049 INFO L93 Difference]: Finished difference Result 24053 states and 44239 transitions. [2022-07-14 15:44:47,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:44:47,049 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24053 states and 44239 transitions. [2022-07-14 15:44:47,123 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13162 [2022-07-14 15:44:47,176 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24053 states to 24053 states and 44239 transitions. [2022-07-14 15:44:47,176 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24053 [2022-07-14 15:44:47,192 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24053 [2022-07-14 15:44:47,193 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24053 states and 44239 transitions. [2022-07-14 15:44:47,208 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:47,208 INFO L369 hiAutomatonCegarLoop]: Abstraction has 24053 states and 44239 transitions. [2022-07-14 15:44:47,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24053 states and 44239 transitions. [2022-07-14 15:44:47,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24053 to 22581. [2022-07-14 15:44:47,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22581 states, 22581 states have (on average 1.8422567645365573) internal successors, (41600), 22580 states have internal predecessors, (41600), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:47,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22581 states to 22581 states and 41600 transitions. [2022-07-14 15:44:47,588 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22581 states and 41600 transitions. [2022-07-14 15:44:47,588 INFO L374 stractBuchiCegarLoop]: Abstraction has 22581 states and 41600 transitions. [2022-07-14 15:44:47,588 INFO L287 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-07-14 15:44:47,588 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22581 states and 41600 transitions. [2022-07-14 15:44:47,643 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12336 [2022-07-14 15:44:47,644 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:47,644 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:47,647 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:47,647 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:47,647 INFO L752 eck$LassoCheckResult]: Stem: 238091#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 238092#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 237326#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 237327#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 237887#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 237888#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 238846#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 238847#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 239171#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 238039#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 238218#L414 assume 0 == initPersonOnFloor_~floor#1; 238964#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 237176#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 238162#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 238054#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 238187#L206 assume !(0 == callOnFloor_~floorID#1); 238188#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 238430#L218-2 assume { :end_inline_callOnFloor } true; 239930#L558 assume { :end_inline_initPersonOnFloor } true; 239929#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 239925#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 239922#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 239920#L414-1 assume 0 == initPersonOnFloor_~floor#1; 239617#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 237455#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 239184#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 238033#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 239349#L206-2 assume !(0 == callOnFloor_~floorID#1); 239350#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 239284#L218-5 assume { :end_inline_callOnFloor } true; 239285#L558-1 assume { :end_inline_initPersonOnFloor } true; 238743#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 238744#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 239886#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 239945#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 239942#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 239943#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 240086#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 240085#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 240083#L2148 assume !(0 != timeShift_~tmp___9~2#1); 240082#L2239 assume !(1 == ~doorState~0); 240081#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 240079#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 240080#L1759 assume !(0 == ~currentFloorID~0); 237628#L1765 assume !(~currentFloorID~0 > 0); 239960#L1780 assume ~currentFloorID~0 > 0; 240517#L1782 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 240515#L1783 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 240516#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 258230#L2247 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 258225#L1966 assume !(1 == ~currentHeading~0); 238969#L1976 assume !(0 == ~currentFloorID~0); 237745#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 249412#L1982-1 assume { :end_inline_continueInDirection } true; 249411#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 249410#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 249217#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 249216#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 249215#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 249184#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 249175#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 249172#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 249170#L3022-2 [2022-07-14 15:44:47,647 INFO L754 eck$LassoCheckResult]: Loop: 249170#L3022-2 assume !false; 249168#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 249166#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 249164#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 238364#L3030 assume 1 != cleanup_~tmp___0~9#1; 238365#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 254484#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 254483#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 254482#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 238335#L1498 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 238336#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 239169#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 237938#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 237939#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 237539#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 237540#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 257952#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 237548#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 237357#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 237358#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 257949#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 257950#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 258198#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 242491#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 242492#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 258882#L1759-2 assume !(0 == ~currentFloorID~0); 242621#L1765-2 assume !(~currentFloorID~0 > 0); 242611#L1780-2 assume ~currentFloorID~0 > 0; 242609#L1782-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 237369#L1783-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 237370#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 259240#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 258897#L1966-3 assume !(1 == ~currentHeading~0); 258825#L1976-9 assume !(0 == ~currentFloorID~0); 249242#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 249238#L1982-7 assume { :end_inline_continueInDirection } true; 249230#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 249229#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 249226#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 249227#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 249228#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 249195#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 249176#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 249173#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 249170#L3022-2 [2022-07-14 15:44:47,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:47,648 INFO L85 PathProgramCache]: Analyzing trace with hash -937073135, now seen corresponding path program 1 times [2022-07-14 15:44:47,648 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:47,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [196424164] [2022-07-14 15:44:47,649 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:47,649 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:47,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:47,677 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:47,678 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:47,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [196424164] [2022-07-14 15:44:47,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [196424164] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:47,678 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:47,678 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:47,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [699035229] [2022-07-14 15:44:47,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:47,679 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:47,679 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:47,679 INFO L85 PathProgramCache]: Analyzing trace with hash -1869227512, now seen corresponding path program 1 times [2022-07-14 15:44:47,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:47,680 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2009472777] [2022-07-14 15:44:47,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:47,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:47,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:47,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:47,704 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:47,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2009472777] [2022-07-14 15:44:47,704 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2009472777] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:47,704 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:47,704 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:44:47,704 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349706912] [2022-07-14 15:44:47,704 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:47,705 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:47,705 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:47,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:44:47,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:44:47,705 INFO L87 Difference]: Start difference. First operand 22581 states and 41600 transitions. cyclomatic complexity: 19020 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:48,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:48,641 INFO L93 Difference]: Finished difference Result 28503 states and 52462 transitions. [2022-07-14 15:44:48,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:44:48,643 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28503 states and 52462 transitions. [2022-07-14 15:44:48,849 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23735 [2022-07-14 15:44:48,919 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28503 states to 28503 states and 52462 transitions. [2022-07-14 15:44:48,919 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28503 [2022-07-14 15:44:48,940 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28503 [2022-07-14 15:44:48,940 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28503 states and 52462 transitions. [2022-07-14 15:44:48,958 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:48,958 INFO L369 hiAutomatonCegarLoop]: Abstraction has 28503 states and 52462 transitions. [2022-07-14 15:44:48,971 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28503 states and 52462 transitions. [2022-07-14 15:44:49,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28503 to 15631. [2022-07-14 15:44:49,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15631 states, 15631 states have (on average 1.8344315782739429) internal successors, (28674), 15630 states have internal predecessors, (28674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:49,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15631 states to 15631 states and 28674 transitions. [2022-07-14 15:44:49,145 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15631 states and 28674 transitions. [2022-07-14 15:44:49,145 INFO L374 stractBuchiCegarLoop]: Abstraction has 15631 states and 28674 transitions. [2022-07-14 15:44:49,145 INFO L287 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-07-14 15:44:49,145 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15631 states and 28674 transitions. [2022-07-14 15:44:49,183 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12380 [2022-07-14 15:44:49,183 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:49,183 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:49,184 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:49,184 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:49,184 INFO L752 eck$LassoCheckResult]: Stem: 289128#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 289129#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 288419#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 288420#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 288936#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 288937#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 289811#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 289812#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 290098#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 289078#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 289251#L414 assume 0 == initPersonOnFloor_~floor#1; 289913#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 288280#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 289198#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 289094#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 289219#L206 assume !(0 == callOnFloor_~floorID#1); 289220#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 289438#L218-2 assume { :end_inline_callOnFloor } true; 290645#L558 assume { :end_inline_initPersonOnFloor } true; 290644#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 290638#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 290635#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 290633#L414-1 assume 0 == initPersonOnFloor_~floor#1; 290605#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 290601#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 290599#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 290595#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 290594#L206-2 assume !(0 == callOnFloor_~floorID#1); 290593#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 290589#L218-5 assume { :end_inline_callOnFloor } true; 290588#L558-1 assume { :end_inline_initPersonOnFloor } true; 290587#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 290586#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 290585#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 290584#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 289744#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 289745#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 289767#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 289769#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 290583#L2148 assume !(0 != timeShift_~tmp___9~2#1); 289894#L2239 assume !(1 == ~doorState~0); 288354#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 288355#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 288687#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 288688#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 290177#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 288804#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 288805#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 289974#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 288806#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 288402#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 289266#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 290403#L1966-2 assume !(1 == ~currentHeading~0); 290408#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 290347#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 290348#L1982-5 assume { :end_inline_continueInDirection } true; 288673#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 296444#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 296443#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 296441#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 296438#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 296429#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 296423#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 296422#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 296421#L3022-2 [2022-07-14 15:44:49,185 INFO L754 eck$LassoCheckResult]: Loop: 296421#L3022-2 assume !false; 296420#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 296419#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 296418#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 296417#L3030 assume 1 != cleanup_~tmp___0~9#1; 296416#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 296415#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 296414#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 296412#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 296410#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 296408#L138-22 assume !(0 == isFloorCalling_~floorID#1); 290718#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 290704#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 290705#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 290688#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 290689#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 290684#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 290685#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 290670#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 290671#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 290666#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 290667#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 294702#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 294701#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 294699#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 294700#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 300146#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 300145#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 290513#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 290514#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 292779#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 292769#L2021-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 292759#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 292757#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 292722#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 292679#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 292672#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 292670#L1966-5 assume !(1 == ~currentHeading~0); 292664#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 292663#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 292650#L1982-11 assume { :end_inline_continueInDirection } true; 292646#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 292643#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 292640#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 292641#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 292642#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 292626#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 292619#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 292620#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 296421#L3022-2 [2022-07-14 15:44:49,185 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:49,185 INFO L85 PathProgramCache]: Analyzing trace with hash 1959658639, now seen corresponding path program 1 times [2022-07-14 15:44:49,185 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:49,185 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351440829] [2022-07-14 15:44:49,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:49,186 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:49,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:49,208 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:49,209 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:49,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351440829] [2022-07-14 15:44:49,209 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351440829] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:49,209 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:49,209 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:49,209 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [343180555] [2022-07-14 15:44:49,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:49,210 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:49,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:49,211 INFO L85 PathProgramCache]: Analyzing trace with hash -954375247, now seen corresponding path program 1 times [2022-07-14 15:44:49,211 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:49,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1490416090] [2022-07-14 15:44:49,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:49,211 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:49,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:49,227 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:49,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:49,228 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1490416090] [2022-07-14 15:44:49,228 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1490416090] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:49,228 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:49,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:44:49,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [906217125] [2022-07-14 15:44:49,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:49,229 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:49,229 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:49,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:44:49,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:44:49,229 INFO L87 Difference]: Start difference. First operand 15631 states and 28674 transitions. cyclomatic complexity: 13044 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:49,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:49,481 INFO L93 Difference]: Finished difference Result 49561 states and 91110 transitions. [2022-07-14 15:44:49,481 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:44:49,482 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 49561 states and 91110 transitions. [2022-07-14 15:44:49,678 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 46141 [2022-07-14 15:44:49,821 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 49561 states to 49561 states and 91110 transitions. [2022-07-14 15:44:49,821 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49561 [2022-07-14 15:44:49,859 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49561 [2022-07-14 15:44:49,859 INFO L73 IsDeterministic]: Start isDeterministic. Operand 49561 states and 91110 transitions. [2022-07-14 15:44:49,892 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:49,892 INFO L369 hiAutomatonCegarLoop]: Abstraction has 49561 states and 91110 transitions. [2022-07-14 15:44:49,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49561 states and 91110 transitions. [2022-07-14 15:44:50,252 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49561 to 15651. [2022-07-14 15:44:50,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15651 states, 15651 states have (on average 1.8333652801737907) internal successors, (28694), 15650 states have internal predecessors, (28694), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:50,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15651 states to 15651 states and 28694 transitions. [2022-07-14 15:44:50,287 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15651 states and 28694 transitions. [2022-07-14 15:44:50,287 INFO L374 stractBuchiCegarLoop]: Abstraction has 15651 states and 28694 transitions. [2022-07-14 15:44:50,287 INFO L287 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-07-14 15:44:50,287 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15651 states and 28694 transitions. [2022-07-14 15:44:50,315 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12398 [2022-07-14 15:44:50,315 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:50,315 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:50,316 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:50,316 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:50,316 INFO L752 eck$LassoCheckResult]: Stem: 354336#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 354337#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 353622#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 353623#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 354142#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 354143#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 355024#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 355025#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 355331#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 354285#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 354457#L414 assume 0 == initPersonOnFloor_~floor#1; 355134#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 353483#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 354404#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 354302#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 354426#L206 assume !(0 == callOnFloor_~floorID#1); 354427#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 354648#L218-2 assume { :end_inline_callOnFloor } true; 355947#L558 assume { :end_inline_initPersonOnFloor } true; 355946#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 355942#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 355939#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 355935#L414-1 assume 0 == initPersonOnFloor_~floor#1; 355907#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 355903#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 355901#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 355897#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 355896#L206-2 assume !(0 == callOnFloor_~floorID#1); 355895#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 355891#L218-5 assume { :end_inline_callOnFloor } true; 355890#L558-1 assume { :end_inline_initPersonOnFloor } true; 355889#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 355888#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 355887#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 355886#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 354956#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 354957#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 354982#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 354984#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 355883#L2148 assume !(0 != timeShift_~tmp___9~2#1); 355113#L2239 assume !(1 == ~doorState~0); 353557#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 353558#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 353890#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 353891#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 355417#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 354007#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 354009#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 355884#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 354010#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 353605#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 354471#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 355660#L1966-2 assume !(1 == ~currentHeading~0); 355667#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 355594#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 355595#L1982-5 assume { :end_inline_continueInDirection } true; 353874#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 353967#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 353968#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 355767#L2665 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 355219#L1395 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 355220#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 353584#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 354586#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 356300#L3022-2 [2022-07-14 15:44:50,317 INFO L754 eck$LassoCheckResult]: Loop: 356300#L3022-2 assume !false; 356294#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 356295#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 356281#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 356282#L3030 assume 1 != cleanup_~tmp___0~9#1; 356259#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 356260#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 356240#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 356241#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 356151#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 356153#L138-22 assume !(0 == isFloorCalling_~floorID#1); 359341#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 356127#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 356128#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 356090#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 356091#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 356086#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 356087#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 356084#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 356083#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 356082#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 356081#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 356079#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 356078#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 356076#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 356073#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 356057#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 356039#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 356026#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 356013#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 355991#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 355990#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 355989#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 355988#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 355492#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 354565#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 358322#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 358319#L1966-5 assume !(1 == ~currentHeading~0); 358316#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 358315#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 358312#L1982-11 assume { :end_inline_continueInDirection } true; 358310#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 358305#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 358303#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 358301#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 358299#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 358284#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 358250#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 356301#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 356300#L3022-2 [2022-07-14 15:44:50,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:50,317 INFO L85 PathProgramCache]: Analyzing trace with hash 1959658639, now seen corresponding path program 2 times [2022-07-14 15:44:50,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:50,317 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [592239347] [2022-07-14 15:44:50,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:50,318 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:50,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:50,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:50,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:50,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [592239347] [2022-07-14 15:44:50,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [592239347] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:50,335 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:50,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:50,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [712302693] [2022-07-14 15:44:50,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:50,336 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:50,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:50,336 INFO L85 PathProgramCache]: Analyzing trace with hash 1346447343, now seen corresponding path program 1 times [2022-07-14 15:44:50,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:50,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740186651] [2022-07-14 15:44:50,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:50,337 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:50,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:50,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:50,366 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:50,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740186651] [2022-07-14 15:44:50,366 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740186651] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:50,366 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:50,366 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:44:50,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [494128619] [2022-07-14 15:44:50,367 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:50,367 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:50,367 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:50,367 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 15:44:50,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-07-14 15:44:50,368 INFO L87 Difference]: Start difference. First operand 15651 states and 28694 transitions. cyclomatic complexity: 13044 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:51,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:51,654 INFO L93 Difference]: Finished difference Result 40510 states and 73590 transitions. [2022-07-14 15:44:51,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-07-14 15:44:51,655 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40510 states and 73590 transitions. [2022-07-14 15:44:51,808 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 37236 [2022-07-14 15:44:51,909 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40510 states to 40510 states and 73590 transitions. [2022-07-14 15:44:51,909 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40510 [2022-07-14 15:44:51,937 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40510 [2022-07-14 15:44:51,938 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40510 states and 73590 transitions. [2022-07-14 15:44:51,965 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:51,965 INFO L369 hiAutomatonCegarLoop]: Abstraction has 40510 states and 73590 transitions. [2022-07-14 15:44:51,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40510 states and 73590 transitions. [2022-07-14 15:44:52,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40510 to 22680. [2022-07-14 15:44:52,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22680 states, 22680 states have (on average 1.8410934744268077) internal successors, (41756), 22679 states have internal predecessors, (41756), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:52,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22680 states to 22680 states and 41756 transitions. [2022-07-14 15:44:52,383 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22680 states and 41756 transitions. [2022-07-14 15:44:52,383 INFO L374 stractBuchiCegarLoop]: Abstraction has 22680 states and 41756 transitions. [2022-07-14 15:44:52,383 INFO L287 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-07-14 15:44:52,383 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22680 states and 41756 transitions. [2022-07-14 15:44:52,438 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19430 [2022-07-14 15:44:52,438 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:52,438 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:52,442 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:52,442 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:52,442 INFO L752 eck$LassoCheckResult]: Stem: 410532#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 410533#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 409820#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 409821#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 410342#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 410343#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 411226#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 411227#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 411538#L3272 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 410482#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 410657#L414 assume 0 == initPersonOnFloor_~floor#1; 411339#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 409679#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 410604#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 410498#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 410626#L206 assume !(0 == callOnFloor_~floorID#1); 410627#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 410851#L218-2 assume { :end_inline_callOnFloor } true; 412193#L558 assume { :end_inline_initPersonOnFloor } true; 412192#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 412188#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 412185#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 412183#L414-1 assume 0 == initPersonOnFloor_~floor#1; 412155#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 412151#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 412149#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 412145#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 412144#L206-2 assume !(0 == callOnFloor_~floorID#1); 412143#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 412139#L218-5 assume { :end_inline_callOnFloor } true; 412138#L558-1 assume { :end_inline_initPersonOnFloor } true; 412137#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 412136#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 412135#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 412134#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 411159#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 411160#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 411185#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 411187#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 412131#L2148 assume !(0 != timeShift_~tmp___9~2#1); 411317#L2239 assume !(1 == ~doorState~0); 409755#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 409756#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 410090#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 410091#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 411633#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 410209#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 410211#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 412132#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 410212#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 409803#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 410670#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 411874#L1966-2 assume !(1 == ~currentHeading~0); 411881#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 411802#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 411803#L1982-5 assume { :end_inline_continueInDirection } true; 410076#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 412196#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 411985#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 411986#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 417864#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 412250#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 412251#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 417857#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 417855#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 417854#L3022-2 [2022-07-14 15:44:52,443 INFO L754 eck$LassoCheckResult]: Loop: 417854#L3022-2 assume !false; 417853#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 417852#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 417851#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 417850#L3030 assume 1 != cleanup_~tmp___0~9#1; 417849#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 417848#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 417847#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 417750#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 417749#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 417748#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 417747#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 417743#L138-26 assume !(0 == isFloorCalling_~floorID#1); 417744#L142-26 assume !(1 == isFloorCalling_~floorID#1); 417732#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 417733#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 417724#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 417725#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 416025#L2148-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 416018#L2150-2 assume !(0 != ~persons_0~0); 416012#L2150-3 assume !(0 != ~persons_1~0); 415987#L2164-1 assume !(0 != ~persons_2~0); 415917#L2178-1 assume !(0 != ~persons_3~0); 415891#L2192-1 assume !(0 != ~persons_4~0); 415867#L2206-1 assume !(0 != ~persons_5~0); 415862#L2220-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~10#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~10#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 415860#L234-12 assume 0 == isPersonOnFloor_~floor#1; 415841#L235-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 415811#L406-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 415809#L2049-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 415807#L2049-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 415806#L234-14 assume 0 == isPersonOnFloor_~floor#1; 415775#L235-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 415770#L406-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 415768#L2062-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 415769#L2062-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 416349#L234-16 assume 0 == isPersonOnFloor_~floor#1; 416295#L235-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 416276#L406-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 416266#L2075-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 416262#L2075-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 414936#L234-18 assume 0 == isPersonOnFloor_~floor#1; 414854#L235-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 414832#L406-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 414829#L2088-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 414826#L2088-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 414825#L234-20 assume 0 == isPersonOnFloor_~floor#1; 414783#L235-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 414758#L406-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 414756#L2101-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 414752#L2101-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 414753#L234-22 assume 0 == isPersonOnFloor_~floor#1; 414731#L235-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 414701#L406-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 414698#L2114-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 414700#L2114-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 417821#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 417822#L185-41 assume { :end_inline_resetCallOnFloor } true; 417929#L2127-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 417930#L1357-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 417915#L1369-5 assume { :end_inline_resetFloorButton } true; 417884#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 417883#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 417882#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 417881#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 417873#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 417869#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 417866#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 417865#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 417856#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 417854#L3022-2 [2022-07-14 15:44:52,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:52,443 INFO L85 PathProgramCache]: Analyzing trace with hash -1856171581, now seen corresponding path program 1 times [2022-07-14 15:44:52,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:52,444 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [800364181] [2022-07-14 15:44:52,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:52,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:52,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:52,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:52,473 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:52,473 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [800364181] [2022-07-14 15:44:52,473 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [800364181] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:52,473 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:52,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:44:52,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1930239579] [2022-07-14 15:44:52,474 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:52,474 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:52,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:52,474 INFO L85 PathProgramCache]: Analyzing trace with hash -822358371, now seen corresponding path program 1 times [2022-07-14 15:44:52,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:52,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [398655621] [2022-07-14 15:44:52,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:52,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:52,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:52,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:52,491 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:52,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [398655621] [2022-07-14 15:44:52,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [398655621] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:52,492 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:52,492 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:44:52,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107086719] [2022-07-14 15:44:52,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:52,492 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:52,492 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:52,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:44:52,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:44:52,493 INFO L87 Difference]: Start difference. First operand 22680 states and 41756 transitions. cyclomatic complexity: 19077 Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:52,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:52,635 INFO L93 Difference]: Finished difference Result 45280 states and 83363 transitions. [2022-07-14 15:44:52,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:44:52,636 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45280 states and 83363 transitions. [2022-07-14 15:44:52,985 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 38860 [2022-07-14 15:44:53,104 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45280 states to 45280 states and 83363 transitions. [2022-07-14 15:44:53,105 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 45280 [2022-07-14 15:44:53,138 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45280 [2022-07-14 15:44:53,138 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45280 states and 83363 transitions. [2022-07-14 15:44:53,165 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:53,165 INFO L369 hiAutomatonCegarLoop]: Abstraction has 45280 states and 83363 transitions. [2022-07-14 15:44:53,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45280 states and 83363 transitions. [2022-07-14 15:44:53,396 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45280 to 22680. [2022-07-14 15:44:53,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22680 states, 22680 states have (on average 1.8408289241622575) internal successors, (41750), 22679 states have internal predecessors, (41750), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:53,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22680 states to 22680 states and 41750 transitions. [2022-07-14 15:44:53,645 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22680 states and 41750 transitions. [2022-07-14 15:44:53,645 INFO L374 stractBuchiCegarLoop]: Abstraction has 22680 states and 41750 transitions. [2022-07-14 15:44:53,645 INFO L287 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-07-14 15:44:53,645 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22680 states and 41750 transitions. [2022-07-14 15:44:53,696 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19430 [2022-07-14 15:44:53,696 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:53,696 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:53,699 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:53,699 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:53,700 INFO L752 eck$LassoCheckResult]: Stem: 478495#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 478496#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 477788#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 477789#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 478310#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 478311#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 479174#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 479175#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 479459#L3272 assume !(0 == getOrigin_~person#1); 479460#L3276 assume !(1 == getOrigin_~person#1); 478447#L3280 assume !(2 == getOrigin_~person#1); 478448#L3284 assume !(3 == getOrigin_~person#1); 479423#L3288 assume !(4 == getOrigin_~person#1); 479867#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 478615#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 478616#L414 assume 0 == initPersonOnFloor_~floor#1; 479278#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 477648#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 478562#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 478461#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 478584#L206 assume !(0 == callOnFloor_~floorID#1); 478586#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 477531#L218-2 assume { :end_inline_callOnFloor } true; 477532#L558 assume { :end_inline_initPersonOnFloor } true; 479563#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 479564#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 480011#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 480008#L414-1 assume 0 == initPersonOnFloor_~floor#1; 479980#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 479976#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 479974#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 479970#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 479969#L206-2 assume !(0 == callOnFloor_~floorID#1); 479968#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 479964#L218-5 assume { :end_inline_callOnFloor } true; 479963#L558-1 assume { :end_inline_initPersonOnFloor } true; 479962#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 479961#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 479960#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 479959#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 479112#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 479113#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 479133#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 479135#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 479956#L2148 assume !(0 != timeShift_~tmp___9~2#1); 479258#L2239 assume !(1 == ~doorState~0); 477723#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 477724#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 478057#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 478058#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 479542#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 478177#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 478179#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 479957#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 478180#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 477771#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 478629#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 479766#L1966-2 assume !(1 == ~currentHeading~0); 479773#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 479709#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 479710#L1982-5 assume { :end_inline_continueInDirection } true; 478043#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 480023#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 479861#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 479862#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 482371#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 482370#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 482367#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 482348#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 482345#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 482344#L3022-2 [2022-07-14 15:44:53,700 INFO L754 eck$LassoCheckResult]: Loop: 482344#L3022-2 assume !false; 482343#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 482342#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 482341#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 482340#L3030 assume 1 != cleanup_~tmp___0~9#1; 482339#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 482338#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 482337#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 482335#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 482336#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 488003#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 488002#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 488001#L138-26 assume !(0 == isFloorCalling_~floorID#1); 487999#L142-26 assume !(1 == isFloorCalling_~floorID#1); 487996#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 487991#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 487986#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 487985#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 487984#L2148-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 480143#L2150-2 assume !(0 != ~persons_0~0); 487972#L2150-3 assume !(0 != ~persons_1~0); 487947#L2164-1 assume !(0 != ~persons_2~0); 487877#L2178-1 assume !(0 != ~persons_3~0); 487851#L2192-1 assume !(0 != ~persons_4~0); 487827#L2206-1 assume !(0 != ~persons_5~0); 487822#L2220-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~10#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~10#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 487820#L234-12 assume 0 == isPersonOnFloor_~floor#1; 487801#L235-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 487771#L406-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 487769#L2049-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 487767#L2049-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 487766#L234-14 assume 0 == isPersonOnFloor_~floor#1; 487735#L235-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 487730#L406-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 487728#L2062-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 487729#L2062-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 489366#L234-16 assume 0 == isPersonOnFloor_~floor#1; 485702#L235-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 485690#L406-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 485688#L2075-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 485686#L2075-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 485685#L234-18 assume 0 == isPersonOnFloor_~floor#1; 485665#L235-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 485649#L406-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 485647#L2088-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 485648#L2088-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 487673#L234-20 assume 0 == isPersonOnFloor_~floor#1; 487089#L235-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 487066#L406-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 487064#L2101-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 487065#L2101-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 488181#L234-22 assume 0 == isPersonOnFloor_~floor#1; 488102#L235-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 488071#L406-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 488069#L2114-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 488067#L2114-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 488066#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 485383#L185-41 assume { :end_inline_resetCallOnFloor } true; 485377#L2127-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 485363#L1357-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 482389#L1369-5 assume { :end_inline_resetFloorButton } true; 482385#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 482383#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 482380#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 482378#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 482359#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 482352#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 482349#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 482347#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 482346#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 482344#L3022-2 [2022-07-14 15:44:53,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:53,701 INFO L85 PathProgramCache]: Analyzing trace with hash -519631534, now seen corresponding path program 1 times [2022-07-14 15:44:53,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:53,701 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1990797695] [2022-07-14 15:44:53,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:53,701 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:53,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:53,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:53,739 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:53,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1990797695] [2022-07-14 15:44:53,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1990797695] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:53,739 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:53,739 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:44:53,739 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [798869663] [2022-07-14 15:44:53,739 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:53,740 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:53,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:53,741 INFO L85 PathProgramCache]: Analyzing trace with hash -822358371, now seen corresponding path program 2 times [2022-07-14 15:44:53,741 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:53,741 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [375914484] [2022-07-14 15:44:53,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:53,741 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:53,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:53,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:53,761 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:53,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [375914484] [2022-07-14 15:44:53,761 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [375914484] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:53,762 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:53,762 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:44:53,762 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [218240547] [2022-07-14 15:44:53,762 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:53,762 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:53,762 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:53,763 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:44:53,763 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:44:53,763 INFO L87 Difference]: Start difference. First operand 22680 states and 41750 transitions. cyclomatic complexity: 19071 Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:55,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:55,140 INFO L93 Difference]: Finished difference Result 40349 states and 73145 transitions. [2022-07-14 15:44:55,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:44:55,140 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40349 states and 73145 transitions. [2022-07-14 15:44:55,397 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 35196 [2022-07-14 15:44:55,488 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40349 states to 40349 states and 73145 transitions. [2022-07-14 15:44:55,488 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40349 [2022-07-14 15:44:55,517 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40349 [2022-07-14 15:44:55,517 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40349 states and 73145 transitions. [2022-07-14 15:44:55,545 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:55,546 INFO L369 hiAutomatonCegarLoop]: Abstraction has 40349 states and 73145 transitions. [2022-07-14 15:44:55,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40349 states and 73145 transitions. [2022-07-14 15:44:55,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40349 to 22584. [2022-07-14 15:44:55,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22584 states, 22584 states have (on average 1.8394438540559688) internal successors, (41542), 22583 states have internal predecessors, (41542), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:55,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22584 states to 22584 states and 41542 transitions. [2022-07-14 15:44:55,826 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22584 states and 41542 transitions. [2022-07-14 15:44:55,826 INFO L374 stractBuchiCegarLoop]: Abstraction has 22584 states and 41542 transitions. [2022-07-14 15:44:55,826 INFO L287 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-07-14 15:44:55,826 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22584 states and 41542 transitions. [2022-07-14 15:44:55,891 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19334 [2022-07-14 15:44:55,891 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:55,891 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:55,895 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:55,896 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:55,896 INFO L752 eck$LassoCheckResult]: Stem: 541547#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 541548#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 540840#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 540841#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 541359#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 541360#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 542223#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 542224#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 542519#L3272 assume !(0 == getOrigin_~person#1); 542520#L3276 assume !(1 == getOrigin_~person#1); 541498#L3280 assume !(2 == getOrigin_~person#1); 541499#L3284 assume !(3 == getOrigin_~person#1); 542480#L3288 assume !(4 == getOrigin_~person#1); 542940#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 541668#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 541669#L414 assume 0 == initPersonOnFloor_~floor#1; 542332#L415 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 540701#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 541616#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 541513#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 541638#L206 assume !(0 == callOnFloor_~floorID#1); 541639#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 541862#L218-2 assume { :end_inline_callOnFloor } true; 543114#L558 assume { :end_inline_initPersonOnFloor } true; 543113#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 543109#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 543106#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 543102#L414-1 assume 0 == initPersonOnFloor_~floor#1; 543074#L415-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 543070#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 543068#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 543064#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 543063#L206-2 assume !(0 == callOnFloor_~floorID#1); 543062#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 543058#L218-5 assume { :end_inline_callOnFloor } true; 543057#L558-1 assume { :end_inline_initPersonOnFloor } true; 543056#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 543055#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 543054#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 543053#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 542160#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 542161#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 542181#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 542183#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 543052#L2148 assume !(0 != timeShift_~tmp___9~2#1); 542314#L2239 assume !(1 == ~doorState~0); 540775#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 540776#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 541108#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 541109#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 542612#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 541226#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 541228#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 543115#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 541229#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 540823#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 541682#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 542840#L1966-2 assume !(1 == ~currentHeading~0); 542845#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 542777#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 542778#L1982-5 assume { :end_inline_continueInDirection } true; 541094#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 541184#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 541185#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 542935#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 550009#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 550007#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 550001#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 549994#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 541890#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 541891#L3022-2 [2022-07-14 15:44:55,896 INFO L754 eck$LassoCheckResult]: Loop: 541891#L3022-2 assume !false; 542098#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 540739#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 540740#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 563084#L3030 assume 1 != cleanup_~tmp___0~9#1; 563083#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 563082#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 563081#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 563080#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 542575#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 557284#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 550338#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 549981#L138-26 assume !(0 == isFloorCalling_~floorID#1); 549982#L142-26 assume !(1 == isFloorCalling_~floorID#1); 549976#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 549973#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 549970#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 549971#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 561710#L2148-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 543134#L2150-2 assume !(0 != ~persons_0~0); 561698#L2150-3 assume !(0 != ~persons_1~0); 561667#L2164-1 assume !(0 != ~persons_2~0); 561661#L2178-1 assume !(0 != ~persons_3~0); 561635#L2192-1 assume !(0 != ~persons_4~0); 561611#L2206-1 assume !(0 != ~persons_5~0); 561610#L2220-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~10#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~10#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561609#L234-12 assume !(0 == isPersonOnFloor_~floor#1); 561608#L267-12 assume 1 == isPersonOnFloor_~floor#1; 561581#L268-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561562#L406-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 561560#L2049-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 561558#L2049-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561557#L234-14 assume 0 == isPersonOnFloor_~floor#1; 561526#L235-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561521#L406-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 561519#L2062-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 561517#L2062-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561516#L234-16 assume 0 == isPersonOnFloor_~floor#1; 561491#L235-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561479#L406-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 561477#L2075-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 561475#L2075-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561472#L234-18 assume 0 == isPersonOnFloor_~floor#1; 561454#L235-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561438#L406-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 561436#L2088-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 561437#L2088-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 561974#L234-20 assume 0 == isPersonOnFloor_~floor#1; 561963#L235-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 561940#L406-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 561938#L2101-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 561939#L2101-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 562082#L234-22 assume 0 == isPersonOnFloor_~floor#1; 562076#L235-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 562046#L406-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 562044#L2114-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 562045#L2114-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 563118#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 541904#L185-41 assume { :end_inline_resetCallOnFloor } true; 543048#L2127-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 542015#L1357-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 540872#L1369-5 assume { :end_inline_resetFloorButton } true; 541842#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 542013#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 540905#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 540906#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 541320#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 542644#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 541887#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 541780#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 542334#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 541891#L3022-2 [2022-07-14 15:44:55,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:55,897 INFO L85 PathProgramCache]: Analyzing trace with hash -519631534, now seen corresponding path program 2 times [2022-07-14 15:44:55,897 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:55,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1136132221] [2022-07-14 15:44:55,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:55,898 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:55,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:55,958 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:55,958 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:55,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1136132221] [2022-07-14 15:44:55,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1136132221] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:55,959 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:55,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:44:55,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043303024] [2022-07-14 15:44:55,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:55,961 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:55,962 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:55,962 INFO L85 PathProgramCache]: Analyzing trace with hash -996207651, now seen corresponding path program 1 times [2022-07-14 15:44:55,962 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:55,962 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470135268] [2022-07-14 15:44:55,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:55,962 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:55,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:55,997 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:55,997 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:55,997 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470135268] [2022-07-14 15:44:55,998 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470135268] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:55,998 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:55,998 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:44:55,998 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [363956600] [2022-07-14 15:44:55,998 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:55,998 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:55,999 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:55,999 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:44:55,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:44:56,000 INFO L87 Difference]: Start difference. First operand 22584 states and 41542 transitions. cyclomatic complexity: 18959 Second operand has 6 states, 6 states have (on average 11.666666666666666) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:56,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:56,466 INFO L93 Difference]: Finished difference Result 67502 states and 124171 transitions. [2022-07-14 15:44:56,467 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-14 15:44:56,468 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 67502 states and 124171 transitions. [2022-07-14 15:44:56,727 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 58002 [2022-07-14 15:44:56,901 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 67502 states to 67502 states and 124171 transitions. [2022-07-14 15:44:56,902 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 67502 [2022-07-14 15:44:56,951 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 67502 [2022-07-14 15:44:56,952 INFO L73 IsDeterministic]: Start isDeterministic. Operand 67502 states and 124171 transitions. [2022-07-14 15:44:56,992 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:56,992 INFO L369 hiAutomatonCegarLoop]: Abstraction has 67502 states and 124171 transitions. [2022-07-14 15:44:57,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67502 states and 124171 transitions. [2022-07-14 15:44:57,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67502 to 22582. [2022-07-14 15:44:57,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22582 states, 22582 states have (on average 1.8392082189354353) internal successors, (41533), 22581 states have internal predecessors, (41533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:57,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22582 states to 22582 states and 41533 transitions. [2022-07-14 15:44:57,578 INFO L392 hiAutomatonCegarLoop]: Abstraction has 22582 states and 41533 transitions. [2022-07-14 15:44:57,578 INFO L374 stractBuchiCegarLoop]: Abstraction has 22582 states and 41533 transitions. [2022-07-14 15:44:57,579 INFO L287 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-07-14 15:44:57,579 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22582 states and 41533 transitions. [2022-07-14 15:44:57,630 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19334 [2022-07-14 15:44:57,630 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:44:57,630 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:44:57,633 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:57,634 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:44:57,634 INFO L752 eck$LassoCheckResult]: Stem: 631644#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 631645#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 630949#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 630950#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 631463#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 631464#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 632319#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 632320#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 632597#L3272 assume !(0 == getOrigin_~person#1); 632598#L3276 assume !(1 == getOrigin_~person#1); 631598#L3280 assume !(2 == getOrigin_~person#1); 631599#L3284 assume !(3 == getOrigin_~person#1); 632560#L3288 assume !(4 == getOrigin_~person#1); 633002#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 631765#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 631766#L414 assume !(0 == initPersonOnFloor_~floor#1); 630725#L441 assume 1 == initPersonOnFloor_~floor#1; 630726#L442 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 630808#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 631711#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 631612#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 631733#L206 assume !(0 == callOnFloor_~floorID#1); 631734#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 631952#L218-2 assume { :end_inline_callOnFloor } true; 632793#L558 assume { :end_inline_initPersonOnFloor } true; 632794#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 632128#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 631902#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 632255#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 633083#L441-1 assume 1 == initPersonOnFloor_~floor#1; 633128#L442-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 633107#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 633105#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 633101#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 633100#L206-2 assume !(0 == callOnFloor_~floorID#1); 633099#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 633095#L218-5 assume { :end_inline_callOnFloor } true; 633094#L558-1 assume { :end_inline_initPersonOnFloor } true; 633093#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 633092#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 633091#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 633090#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 632253#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 632254#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 632275#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 632277#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 633086#L2148 assume !(0 != timeShift_~tmp___9~2#1); 632403#L2239 assume !(1 == ~doorState~0); 630884#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 630885#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 631215#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 631216#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 632679#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 631330#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 631332#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 633088#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 631333#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 630932#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 631779#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 632901#L1966-2 assume !(1 == ~currentHeading~0); 632907#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 632841#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 632842#L1982-5 assume { :end_inline_continueInDirection } true; 631199#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 631291#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 631292#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 630674#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 630675#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 632728#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 632256#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 630911#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 631890#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 631978#L3022-2 [2022-07-14 15:44:57,634 INFO L754 eck$LassoCheckResult]: Loop: 631978#L3022-2 assume !false; 651570#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 651569#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 636701#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 636700#L3030 assume 1 != cleanup_~tmp___0~9#1; 636699#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 636698#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 636697#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 636696#L1494 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 636462#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 636461#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 636460#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 636459#L138-26 assume !(0 == isFloorCalling_~floorID#1); 636453#L142-26 assume !(1 == isFloorCalling_~floorID#1); 636454#L146-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 641146#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 641143#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 641141#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 641138#L2148-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 641131#L2150-2 assume !(0 != ~persons_0~0); 641125#L2150-3 assume !(0 != ~persons_1~0); 641094#L2164-1 assume !(0 != ~persons_2~0); 641088#L2178-1 assume !(0 != ~persons_3~0); 641062#L2192-1 assume !(0 != ~persons_4~0); 640977#L2206-1 assume !(0 != ~persons_5~0); 640970#L2220-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~10#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~10#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640546#L234-12 assume !(0 == isPersonOnFloor_~floor#1); 640539#L267-12 assume 1 == isPersonOnFloor_~floor#1; 640517#L268-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640503#L406-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 640501#L2049-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 640499#L2049-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640498#L234-14 assume 0 == isPersonOnFloor_~floor#1; 640459#L235-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640453#L406-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 640451#L2062-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 640449#L2062-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640448#L234-16 assume 0 == isPersonOnFloor_~floor#1; 640417#L235-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640405#L406-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 640403#L2075-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 640401#L2075-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640394#L234-18 assume 0 == isPersonOnFloor_~floor#1; 640188#L235-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640171#L406-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 640169#L2088-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 640167#L2088-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640165#L234-20 assume 0 == isPersonOnFloor_~floor#1; 640150#L235-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640126#L406-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 640124#L2101-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 640122#L2101-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 640121#L234-22 assume 0 == isPersonOnFloor_~floor#1; 640115#L235-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 640085#L406-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 640083#L2114-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 640084#L2114-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 643390#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 631995#L185-41 assume { :end_inline_resetCallOnFloor } true; 651596#L2127-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 651593#L1357-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 644894#L1369-5 assume { :end_inline_resetFloorButton } true; 631933#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 651588#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 651586#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 651584#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 651580#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 651576#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 651573#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 651572#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 651571#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 631978#L3022-2 [2022-07-14 15:44:57,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:57,635 INFO L85 PathProgramCache]: Analyzing trace with hash 777262428, now seen corresponding path program 1 times [2022-07-14 15:44:57,635 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:57,635 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1075900642] [2022-07-14 15:44:57,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:57,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:57,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:57,661 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:57,661 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:57,661 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1075900642] [2022-07-14 15:44:57,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1075900642] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:57,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:57,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:44:57,662 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281246290] [2022-07-14 15:44:57,662 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:57,662 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:44:57,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:44:57,663 INFO L85 PathProgramCache]: Analyzing trace with hash -996207651, now seen corresponding path program 2 times [2022-07-14 15:44:57,663 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:44:57,663 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [566961110] [2022-07-14 15:44:57,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:44:57,663 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:44:57,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:44:57,680 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:44:57,680 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:44:57,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [566961110] [2022-07-14 15:44:57,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [566961110] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:44:57,681 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:44:57,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:44:57,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1078761189] [2022-07-14 15:44:57,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:44:57,681 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:44:57,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:44:57,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:44:57,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:44:57,682 INFO L87 Difference]: Start difference. First operand 22582 states and 41533 transitions. cyclomatic complexity: 18952 Second operand has 5 states, 5 states have (on average 14.2) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:59,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:59,142 INFO L93 Difference]: Finished difference Result 53921 states and 97302 transitions. [2022-07-14 15:44:59,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:44:59,142 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53921 states and 97302 transitions. [2022-07-14 15:44:59,345 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 48966 [2022-07-14 15:44:59,515 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53921 states to 53921 states and 97302 transitions. [2022-07-14 15:44:59,515 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53921 [2022-07-14 15:44:59,549 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53921 [2022-07-14 15:44:59,549 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53921 states and 97302 transitions. [2022-07-14 15:44:59,578 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:44:59,578 INFO L369 hiAutomatonCegarLoop]: Abstraction has 53921 states and 97302 transitions. [2022-07-14 15:44:59,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53921 states and 97302 transitions. [2022-07-14 15:45:00,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53921 to 29492. [2022-07-14 15:45:00,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29492 states, 29492 states have (on average 1.8404991184049913) internal successors, (54280), 29491 states have internal predecessors, (54280), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:00,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29492 states to 29492 states and 54280 transitions. [2022-07-14 15:45:00,106 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29492 states and 54280 transitions. [2022-07-14 15:45:00,106 INFO L374 stractBuchiCegarLoop]: Abstraction has 29492 states and 54280 transitions. [2022-07-14 15:45:00,106 INFO L287 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-07-14 15:45:00,106 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29492 states and 54280 transitions. [2022-07-14 15:45:00,185 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:00,185 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:00,186 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:00,189 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:00,189 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:00,189 INFO L752 eck$LassoCheckResult]: Stem: 708176#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 708177#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 707472#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 707473#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 707987#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 707988#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 708871#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 708872#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 709166#L3272 assume !(0 == getOrigin_~person#1); 709167#L3276 assume !(1 == getOrigin_~person#1); 708128#L3280 assume !(2 == getOrigin_~person#1); 708129#L3284 assume !(3 == getOrigin_~person#1); 709123#L3288 assume !(4 == getOrigin_~person#1); 709590#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 708298#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 708299#L414 assume !(0 == initPersonOnFloor_~floor#1); 707255#L441 assume 1 == initPersonOnFloor_~floor#1; 707256#L442 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 707333#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 708246#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 708144#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 708268#L206 assume !(0 == callOnFloor_~floorID#1); 708269#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 708490#L218-2 assume { :end_inline_callOnFloor } true; 709769#L558 assume { :end_inline_initPersonOnFloor } true; 709768#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 709767#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 709760#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 709765#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 709756#L441-1 assume 1 == initPersonOnFloor_~floor#1; 709745#L442-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 709723#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 709721#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 709717#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 709716#L206-2 assume !(0 == callOnFloor_~floorID#1); 709715#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 709711#L218-5 assume { :end_inline_callOnFloor } true; 709710#L558-1 assume { :end_inline_initPersonOnFloor } true; 709709#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 709708#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 709707#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 709706#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 708799#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 708800#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 708825#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 708827#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 709705#L2148 assume !(0 != timeShift_~tmp___9~2#1); 708956#L2239 assume !(1 == ~doorState~0); 707407#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 707408#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 707739#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 707740#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 709253#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 707855#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 707857#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 709770#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 707858#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 707455#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 708313#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 709477#L1966-2 assume !(1 == ~currentHeading~0); 709483#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 709416#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 709417#L1982-5 assume { :end_inline_continueInDirection } true; 707724#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 707815#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 707816#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 709584#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 715297#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 715295#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 715289#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 715282#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 708516#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 708517#L3022-2 [2022-07-14 15:45:00,190 INFO L754 eck$LassoCheckResult]: Loop: 708517#L3022-2 assume !false; 716475#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 716471#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 716472#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 716467#L3030 assume 1 != cleanup_~tmp___0~9#1; 716468#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 716463#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 716464#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 716459#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 716455#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 716457#L138-22 assume !(0 == isFloorCalling_~floorID#1); 716372#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 716369#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 716355#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 716351#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 716343#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 716344#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 719761#L138-26 assume !(0 == isFloorCalling_~floorID#1); 719762#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 723660#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 732971#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 732972#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 732977#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 732973#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 732970#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 732968#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 732967#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 723586#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 723584#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 723581#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 723577#L1759-2 assume !(0 == ~currentFloorID~0); 723573#L1765-2 assume ~currentFloorID~0 > 0; 723572#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 723571#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 723558#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 723553#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 723538#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 723532#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 723530#L1966-3 assume !(1 == ~currentHeading~0); 723386#L1976-9 assume !(0 == ~currentFloorID~0); 715096#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 715092#L1982-7 assume { :end_inline_continueInDirection } true; 715091#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 715053#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 715050#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 715048#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 715042#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 715043#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 710127#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 710128#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 710064#L3022-2 assume !false; 710065#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 710056#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 710057#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 710048#L3030 assume 1 != cleanup_~tmp___0~9#1; 710049#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 710040#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 710041#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 710031#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 710032#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 710021#L138-22 assume !(0 == isFloorCalling_~floorID#1); 710022#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 709997#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 709998#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 709979#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 709980#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 709969#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 709970#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 709963#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 709961#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 709959#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 709957#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 709953#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 709955#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 715155#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 715422#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 715421#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 715419#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 715420#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 715385#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 715484#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 715364#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 715482#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 715480#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 715442#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 715369#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 715365#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 715359#L1966-5 assume !(1 == ~currentHeading~0); 715353#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 715349#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 709657#L1982-11 assume { :end_inline_continueInDirection } true; 708471#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 721707#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 721698#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 721699#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 723627#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 721686#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 721687#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 716478#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 716479#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 708517#L3022-2 [2022-07-14 15:45:00,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:00,190 INFO L85 PathProgramCache]: Analyzing trace with hash 777262428, now seen corresponding path program 2 times [2022-07-14 15:45:00,191 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:00,191 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [144756532] [2022-07-14 15:45:00,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:00,191 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:00,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:00,212 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:00,212 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:00,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [144756532] [2022-07-14 15:45:00,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [144756532] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:00,212 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:00,213 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:45:00,213 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1188089074] [2022-07-14 15:45:00,213 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:00,213 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:00,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:00,213 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 1 times [2022-07-14 15:45:00,214 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:00,214 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [183901720] [2022-07-14 15:45:00,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:00,214 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:00,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:00,243 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:00,244 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:00,244 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [183901720] [2022-07-14 15:45:00,244 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [183901720] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:00,244 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:00,244 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:00,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1649030823] [2022-07-14 15:45:00,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:00,245 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:00,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:00,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:45:00,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:45:00,246 INFO L87 Difference]: Start difference. First operand 29492 states and 54280 transitions. cyclomatic complexity: 24789 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:00,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:00,565 INFO L93 Difference]: Finished difference Result 58894 states and 108384 transitions. [2022-07-14 15:45:00,565 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:45:00,565 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58894 states and 108384 transitions. [2022-07-14 15:45:00,816 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-14 15:45:01,003 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58894 states to 58894 states and 108384 transitions. [2022-07-14 15:45:01,004 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58894 [2022-07-14 15:45:01,055 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58894 [2022-07-14 15:45:01,055 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58894 states and 108384 transitions. [2022-07-14 15:45:01,351 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:01,351 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58894 states and 108384 transitions. [2022-07-14 15:45:01,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58894 states and 108384 transitions. [2022-07-14 15:45:01,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58894 to 29492. [2022-07-14 15:45:01,681 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29492 states, 29492 states have (on average 1.8400244134002441) internal successors, (54266), 29491 states have internal predecessors, (54266), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:01,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29492 states to 29492 states and 54266 transitions. [2022-07-14 15:45:01,729 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29492 states and 54266 transitions. [2022-07-14 15:45:01,729 INFO L374 stractBuchiCegarLoop]: Abstraction has 29492 states and 54266 transitions. [2022-07-14 15:45:01,729 INFO L287 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-07-14 15:45:01,729 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29492 states and 54266 transitions. [2022-07-14 15:45:01,805 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:01,805 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:01,805 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:01,809 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:01,809 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:01,809 INFO L752 eck$LassoCheckResult]: Stem: 796576#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 796577#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 795874#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 795875#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 796391#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 796392#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 797266#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 797267#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 797562#L3272 assume !(0 == getOrigin_~person#1); 797563#L3276 assume !(1 == getOrigin_~person#1); 796529#L3280 assume !(2 == getOrigin_~person#1); 796530#L3284 assume !(3 == getOrigin_~person#1); 797519#L3288 assume !(4 == getOrigin_~person#1); 797983#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 796696#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 796697#L414 assume !(0 == initPersonOnFloor_~floor#1); 795650#L441 assume 1 == initPersonOnFloor_~floor#1; 795651#L442 assume !(0 == initPersonOnFloor_~person#1); 796222#L445 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 795733#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 796644#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 796544#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 796666#L206 assume !(0 == callOnFloor_~floorID#1); 796667#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 796896#L218-2 assume { :end_inline_callOnFloor } true; 797761#L558 assume { :end_inline_initPersonOnFloor } true; 797762#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 797076#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 796843#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 798151#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 798143#L441-1 assume 1 == initPersonOnFloor_~floor#1; 798150#L442-2 assume !(0 == initPersonOnFloor_~person#1); 798135#L445-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 798116#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 798114#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 798110#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 798109#L206-2 assume !(0 == callOnFloor_~floorID#1); 798108#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 798104#L218-5 assume { :end_inline_callOnFloor } true; 798103#L558-1 assume { :end_inline_initPersonOnFloor } true; 798102#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798101#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798099#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 798098#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 797198#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 797199#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 797223#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 797225#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 798092#L2148 assume !(0 != timeShift_~tmp___9~2#1); 797354#L2239 assume !(1 == ~doorState~0); 795809#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 795810#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 796141#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 796142#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 797643#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 796256#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 796258#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 798093#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 796259#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 795857#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 796710#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 797876#L1966-2 assume !(1 == ~currentHeading~0); 797883#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 797814#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 797815#L1982-5 assume { :end_inline_continueInDirection } true; 796127#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 800326#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 797976#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 797977#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 804345#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 804343#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 804337#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 804330#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 804327#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 804328#L3022-2 [2022-07-14 15:45:01,809 INFO L754 eck$LassoCheckResult]: Loop: 804328#L3022-2 assume !false; 804323#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 804324#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 804319#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 804320#L3030 assume 1 != cleanup_~tmp___0~9#1; 804315#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 804316#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 804311#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 804312#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 804305#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 804307#L138-22 assume !(0 == isFloorCalling_~floorID#1); 816948#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 816944#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 816927#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 816921#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 816909#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 816907#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 816905#L138-26 assume !(0 == isFloorCalling_~floorID#1); 816901#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 816896#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 816893#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 816894#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 816900#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 816895#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 816892#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 816890#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 816889#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 800667#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 800666#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 800664#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 800665#L1759-2 assume !(0 == ~currentFloorID~0); 801014#L1765-2 assume ~currentFloorID~0 > 0; 801013#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 801012#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 801011#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 800589#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 800576#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 800429#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 800423#L1966-3 assume !(1 == ~currentHeading~0); 800415#L1976-9 assume !(0 == ~currentFloorID~0); 800405#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 800400#L1982-7 assume { :end_inline_continueInDirection } true; 800337#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 800336#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 800333#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 800334#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 800335#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 798550#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 798519#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 798485#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 798484#L3022-2 assume !false; 798483#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 798482#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 798481#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 798480#L3030 assume 1 != cleanup_~tmp___0~9#1; 798479#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798478#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798477#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 798475#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 798472#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798471#L138-22 assume !(0 == isFloorCalling_~floorID#1); 798460#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798444#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 798445#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 798423#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 798424#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 798410#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798411#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798407#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 798406#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 798405#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 798404#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 798402#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 798401#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 798399#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 798398#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 798397#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 797988#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 797989#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 798011#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 804133#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 804131#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 804130#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 804121#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 797714#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 797715#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 809436#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 809433#L1966-5 assume !(1 == ~currentHeading~0); 809418#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 809413#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 809404#L1982-11 assume { :end_inline_continueInDirection } true; 809402#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 809392#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 809393#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 809385#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 809383#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 809384#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 804358#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 804350#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 804329#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 804328#L3022-2 [2022-07-14 15:45:01,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:01,810 INFO L85 PathProgramCache]: Analyzing trace with hash 234391820, now seen corresponding path program 1 times [2022-07-14 15:45:01,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:01,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1418834955] [2022-07-14 15:45:01,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:01,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:01,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:01,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:01,830 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:01,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1418834955] [2022-07-14 15:45:01,831 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1418834955] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:01,831 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:01,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:45:01,831 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [116026108] [2022-07-14 15:45:01,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:01,831 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:01,832 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:01,832 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 2 times [2022-07-14 15:45:01,832 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:01,832 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1791393145] [2022-07-14 15:45:01,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:01,832 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:01,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:01,861 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:01,861 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:01,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1791393145] [2022-07-14 15:45:01,861 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1791393145] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:01,862 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:01,862 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:01,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1084834154] [2022-07-14 15:45:01,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:01,862 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:01,863 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:01,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:45:01,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:45:01,863 INFO L87 Difference]: Start difference. First operand 29492 states and 54266 transitions. cyclomatic complexity: 24775 Second operand has 4 states, 4 states have (on average 18.5) internal successors, (74), 4 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:02,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:02,153 INFO L93 Difference]: Finished difference Result 58894 states and 108362 transitions. [2022-07-14 15:45:02,154 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:45:02,154 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58894 states and 108362 transitions. [2022-07-14 15:45:02,642 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-14 15:45:02,791 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58894 states to 58894 states and 108362 transitions. [2022-07-14 15:45:02,792 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58894 [2022-07-14 15:45:02,832 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58894 [2022-07-14 15:45:02,832 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58894 states and 108362 transitions. [2022-07-14 15:45:02,867 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:02,867 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58894 states and 108362 transitions. [2022-07-14 15:45:02,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58894 states and 108362 transitions. [2022-07-14 15:45:03,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58894 to 29492. [2022-07-14 15:45:03,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29492 states, 29492 states have (on average 1.839549708395497) internal successors, (54252), 29491 states have internal predecessors, (54252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:03,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29492 states to 29492 states and 54252 transitions. [2022-07-14 15:45:03,238 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29492 states and 54252 transitions. [2022-07-14 15:45:03,238 INFO L374 stractBuchiCegarLoop]: Abstraction has 29492 states and 54252 transitions. [2022-07-14 15:45:03,246 INFO L287 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-07-14 15:45:03,246 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29492 states and 54252 transitions. [2022-07-14 15:45:03,325 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:03,325 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:03,325 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:03,329 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:03,329 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:03,329 INFO L752 eck$LassoCheckResult]: Stem: 884973#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 884974#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 884272#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 884273#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 884784#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 884785#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 885661#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 885662#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 885960#L3272 assume !(0 == getOrigin_~person#1); 885961#L3276 assume !(1 == getOrigin_~person#1); 884922#L3280 assume !(2 == getOrigin_~person#1); 884923#L3284 assume !(3 == getOrigin_~person#1); 885919#L3288 assume !(4 == getOrigin_~person#1); 886388#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 885097#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 885098#L414 assume !(0 == initPersonOnFloor_~floor#1); 884050#L441 assume 1 == initPersonOnFloor_~floor#1; 884051#L442 assume !(0 == initPersonOnFloor_~person#1); 884612#L445 assume !(1 == initPersonOnFloor_~person#1); 884613#L448 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 884133#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 885042#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 884941#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 885065#L206 assume !(0 == callOnFloor_~floorID#1); 885067#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 884016#L218-2 assume { :end_inline_callOnFloor } true; 884017#L558 assume { :end_inline_initPersonOnFloor } true; 886065#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 886066#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 885095#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 886546#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 886492#L441-1 assume 1 == initPersonOnFloor_~floor#1; 886542#L442-2 assume !(0 == initPersonOnFloor_~person#1); 886538#L445-2 assume !(1 == initPersonOnFloor_~person#1); 886529#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 886513#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 886511#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 886507#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 886506#L206-2 assume !(0 == callOnFloor_~floorID#1); 886505#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 886501#L218-5 assume { :end_inline_callOnFloor } true; 886500#L558-1 assume { :end_inline_initPersonOnFloor } true; 886499#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 886498#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 886497#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 886496#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 885597#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 885598#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 885618#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 885620#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 886487#L2148 assume !(0 != timeShift_~tmp___9~2#1); 885751#L2239 assume !(1 == ~doorState~0); 884207#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 884208#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 884534#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 884535#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 886046#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 884648#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 884650#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 886489#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 884651#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 884255#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 885111#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 886284#L1966-2 assume !(1 == ~currentHeading~0); 886291#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 886224#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 886225#L1982-5 assume { :end_inline_continueInDirection } true; 884517#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 884610#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 884611#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 886381#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 890905#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 890904#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 890901#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 890885#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 890882#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 890881#L3022-2 [2022-07-14 15:45:03,330 INFO L754 eck$LassoCheckResult]: Loop: 890881#L3022-2 assume !false; 890880#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 890879#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 890878#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 890877#L3030 assume 1 != cleanup_~tmp___0~9#1; 890876#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 889389#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 889388#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 889386#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 889384#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 889383#L138-22 assume !(0 == isFloorCalling_~floorID#1); 888611#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 888603#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 888330#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 888317#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 888316#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 888315#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 888313#L138-26 assume !(0 == isFloorCalling_~floorID#1); 888314#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 891950#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 891942#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 891943#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 891930#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 891926#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 891920#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 891918#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 891917#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 886904#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 886902#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 886896#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 886409#L1759-2 assume !(0 == ~currentFloorID~0); 885394#L1765-2 assume ~currentFloorID~0 > 0; 885395#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 884287#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 884288#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 886172#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 886173#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 887240#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 887520#L1966-3 assume !(1 == ~currentHeading~0); 887827#L1976-9 assume !(0 == ~currentFloorID~0); 887825#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 887395#L1982-7 assume { :end_inline_continueInDirection } true; 887393#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 887391#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 887387#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 887388#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 887383#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 887351#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 887343#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 887340#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 887337#L3022-2 assume !false; 887334#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 887331#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 887328#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 887325#L3030 assume 1 != cleanup_~tmp___0~9#1; 887322#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 887319#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 887317#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 887314#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 887315#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 888354#L138-22 assume !(0 == isFloorCalling_~floorID#1); 888272#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 888241#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 888242#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 887310#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 887311#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 887289#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 887290#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 887283#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 887281#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 887279#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 887277#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 887274#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 887259#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 887260#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 884980#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 884981#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 886223#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 886391#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 885129#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 887216#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 887215#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 887162#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 887163#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 887184#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 887155#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 887166#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 887167#L1966-5 assume !(1 == ~currentHeading~0); 887267#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 887268#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 890921#L1982-11 assume { :end_inline_continueInDirection } true; 890917#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 890916#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 890914#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 890912#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 890893#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 890889#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 890886#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 890884#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 890883#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 890881#L3022-2 [2022-07-14 15:45:03,330 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:03,330 INFO L85 PathProgramCache]: Analyzing trace with hash 2039265788, now seen corresponding path program 1 times [2022-07-14 15:45:03,330 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:03,330 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1360965810] [2022-07-14 15:45:03,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:03,331 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:03,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:03,363 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:03,363 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:03,364 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1360965810] [2022-07-14 15:45:03,364 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1360965810] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:03,364 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:03,364 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:45:03,364 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1361032257] [2022-07-14 15:45:03,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:03,364 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:03,365 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:03,365 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 1 times [2022-07-14 15:45:03,365 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:03,365 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [847021112] [2022-07-14 15:45:03,365 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:03,365 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:03,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:03,390 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:03,391 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:03,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [847021112] [2022-07-14 15:45:03,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [847021112] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:03,391 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:03,391 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:03,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1055624110] [2022-07-14 15:45:03,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:03,392 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:03,392 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:03,392 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:45:03,392 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:45:03,392 INFO L87 Difference]: Start difference. First operand 29492 states and 54252 transitions. cyclomatic complexity: 24761 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:03,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:03,983 INFO L93 Difference]: Finished difference Result 117578 states and 216378 transitions. [2022-07-14 15:45:03,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:45:03,984 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 117578 states and 216378 transitions. [2022-07-14 15:45:04,710 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 105024 [2022-07-14 15:45:05,081 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 117578 states to 117578 states and 216378 transitions. [2022-07-14 15:45:05,082 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117578 [2022-07-14 15:45:05,180 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117578 [2022-07-14 15:45:05,180 INFO L73 IsDeterministic]: Start isDeterministic. Operand 117578 states and 216378 transitions. [2022-07-14 15:45:05,264 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:05,264 INFO L369 hiAutomatonCegarLoop]: Abstraction has 117578 states and 216378 transitions. [2022-07-14 15:45:05,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117578 states and 216378 transitions. [2022-07-14 15:45:05,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117578 to 29492. [2022-07-14 15:45:05,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29492 states, 29492 states have (on average 1.8394140783941408) internal successors, (54248), 29491 states have internal predecessors, (54248), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:05,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29492 states to 29492 states and 54248 transitions. [2022-07-14 15:45:05,886 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29492 states and 54248 transitions. [2022-07-14 15:45:05,886 INFO L374 stractBuchiCegarLoop]: Abstraction has 29492 states and 54248 transitions. [2022-07-14 15:45:05,886 INFO L287 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-07-14 15:45:05,886 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29492 states and 54248 transitions. [2022-07-14 15:45:05,969 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:05,969 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:05,969 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:05,972 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:05,972 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:05,973 INFO L752 eck$LassoCheckResult]: Stem: 1032061#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1032062#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1031359#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1031360#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1031877#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1031878#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1032754#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1032755#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1033055#L3272 assume !(0 == getOrigin_~person#1); 1033056#L3276 assume !(1 == getOrigin_~person#1); 1032014#L3280 assume !(2 == getOrigin_~person#1); 1032015#L3284 assume !(3 == getOrigin_~person#1); 1033012#L3288 assume !(4 == getOrigin_~person#1); 1033515#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1032184#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1032185#L414 assume !(0 == initPersonOnFloor_~floor#1); 1031134#L441 assume !(1 == initPersonOnFloor_~floor#1); 1031136#L468 assume !(2 == initPersonOnFloor_~floor#1); 1031863#L495 assume !(3 == initPersonOnFloor_~floor#1); 1032491#L522 assume !(4 == initPersonOnFloor_~floor#1); 1031217#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1032130#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1032029#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1032153#L206 assume !(0 == callOnFloor_~floorID#1); 1032154#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1032378#L218-2 assume { :end_inline_callOnFloor } true; 1033275#L558 assume { :end_inline_initPersonOnFloor } true; 1033276#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1032557#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1032328#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1031965#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1031966#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1032827#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1032828#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1033676#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1033662#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1033660#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1033656#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1033655#L206-2 assume !(0 == callOnFloor_~floorID#1); 1033654#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1033650#L218-5 assume { :end_inline_callOnFloor } true; 1033649#L558-1 assume { :end_inline_initPersonOnFloor } true; 1033648#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1033647#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1033646#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1033645#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1032686#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1032687#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1032709#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1032711#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1033642#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1032842#L2239 assume !(1 == ~doorState~0); 1031293#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1031294#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1031625#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1031626#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1033151#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1031742#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1031744#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1033643#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1031745#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1031341#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1032198#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1033401#L1966-2 assume !(1 == ~currentHeading~0); 1033406#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1033331#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1033332#L1982-5 assume { :end_inline_continueInDirection } true; 1031608#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1031702#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1031703#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1031083#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1031084#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1033206#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1032688#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1031320#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1032314#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1032406#L3022-2 [2022-07-14 15:45:05,973 INFO L754 eck$LassoCheckResult]: Loop: 1032406#L3022-2 assume !false; 1040775#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1040771#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1040772#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1040767#L3030 assume 1 != cleanup_~tmp___0~9#1; 1040768#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1040763#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1040764#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1040758#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1040759#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1040752#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1040753#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1047649#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1040721#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1040717#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1040712#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1040713#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1044075#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1044076#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1047632#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1052359#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1052360#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1052365#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1052361#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1052358#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1052356#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1052355#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1033983#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1033982#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1033979#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1033980#L1759-2 assume !(0 == ~currentFloorID~0); 1036726#L1765-2 assume ~currentFloorID~0 > 0; 1036107#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1036106#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1033975#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1033976#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1035908#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1035899#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1035892#L1966-3 assume !(1 == ~currentHeading~0); 1035885#L1976-9 assume !(0 == ~currentFloorID~0); 1035875#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1035870#L1982-7 assume { :end_inline_continueInDirection } true; 1035871#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1040619#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1040616#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1040617#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1040618#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1040608#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1040602#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1040601#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1040600#L3022-2 assume !false; 1040599#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1040598#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1040597#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1040596#L3030 assume 1 != cleanup_~tmp___0~9#1; 1040595#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1040594#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1040593#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1040554#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1040555#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1040699#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1034095#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1034081#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1034082#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1034065#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1034066#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1034061#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1034062#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1034059#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1034058#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1034057#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1034056#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1034054#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1034053#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1034051#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1032068#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1032069#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1033330#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1033521#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1031721#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1031722#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1032699#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1033124#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1040009#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1033226#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1033227#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1040011#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1040010#L1966-5 assume !(1 == ~currentHeading~0); 1040008#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1031357#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1031358#L1982-11 assume { :end_inline_continueInDirection } true; 1032358#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1045894#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1045891#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1045888#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1045886#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1047558#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1047557#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1040778#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1040779#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1032406#L3022-2 [2022-07-14 15:45:05,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:05,974 INFO L85 PathProgramCache]: Analyzing trace with hash -2088946052, now seen corresponding path program 1 times [2022-07-14 15:45:05,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:05,974 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [941086011] [2022-07-14 15:45:05,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:05,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:05,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:05,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:05,999 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:05,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [941086011] [2022-07-14 15:45:05,999 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [941086011] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:05,999 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:05,999 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:45:06,000 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1261508806] [2022-07-14 15:45:06,000 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:06,000 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:06,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:06,001 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 2 times [2022-07-14 15:45:06,002 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:06,002 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2039758760] [2022-07-14 15:45:06,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:06,002 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:06,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:06,355 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:06,355 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:06,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2039758760] [2022-07-14 15:45:06,355 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2039758760] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:06,355 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:06,355 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:06,355 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [58244279] [2022-07-14 15:45:06,355 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:06,355 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:06,355 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:06,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:45:06,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:45:06,356 INFO L87 Difference]: Start difference. First operand 29492 states and 54248 transitions. cyclomatic complexity: 24757 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:06,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:06,604 INFO L93 Difference]: Finished difference Result 88173 states and 162260 transitions. [2022-07-14 15:45:06,605 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:45:06,605 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 88173 states and 162260 transitions. [2022-07-14 15:45:06,934 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 78768 [2022-07-14 15:45:07,171 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 88173 states to 88173 states and 162260 transitions. [2022-07-14 15:45:07,171 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 88173 [2022-07-14 15:45:07,237 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 88173 [2022-07-14 15:45:07,238 INFO L73 IsDeterministic]: Start isDeterministic. Operand 88173 states and 162260 transitions. [2022-07-14 15:45:07,303 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:07,303 INFO L369 hiAutomatonCegarLoop]: Abstraction has 88173 states and 162260 transitions. [2022-07-14 15:45:07,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88173 states and 162260 transitions. [2022-07-14 15:45:07,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88173 to 29477. [2022-07-14 15:45:07,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29477 states, 29477 states have (on average 1.8394002103334803) internal successors, (54220), 29476 states have internal predecessors, (54220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:08,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29477 states to 29477 states and 54220 transitions. [2022-07-14 15:45:08,041 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29477 states and 54220 transitions. [2022-07-14 15:45:08,041 INFO L374 stractBuchiCegarLoop]: Abstraction has 29477 states and 54220 transitions. [2022-07-14 15:45:08,041 INFO L287 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-07-14 15:45:08,041 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29477 states and 54220 transitions. [2022-07-14 15:45:08,115 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:08,116 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:08,116 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:08,119 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:08,119 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:08,120 INFO L752 eck$LassoCheckResult]: Stem: 1149738#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1149739#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1149033#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1149034#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1149550#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1149551#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1150415#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1150416#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1150710#L3272 assume !(0 == getOrigin_~person#1); 1150711#L3276 assume !(1 == getOrigin_~person#1); 1149690#L3280 assume !(2 == getOrigin_~person#1); 1149691#L3284 assume !(3 == getOrigin_~person#1); 1150672#L3288 assume !(4 == getOrigin_~person#1); 1151153#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1149857#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1149858#L414 assume !(0 == initPersonOnFloor_~floor#1); 1148813#L441 assume 1 == initPersonOnFloor_~floor#1; 1148814#L442 assume !(0 == initPersonOnFloor_~person#1); 1149377#L445 assume !(1 == initPersonOnFloor_~person#1); 1149378#L448 assume !(2 == initPersonOnFloor_~person#1); 1149028#L451 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 1149029#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1149806#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1149706#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1149829#L206 assume !(0 == callOnFloor_~floorID#1); 1149830#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1150051#L218-2 assume { :end_inline_callOnFloor } true; 1151327#L558 assume { :end_inline_initPersonOnFloor } true; 1151326#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1151325#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1151323#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1151329#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1151316#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1150488#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1150489#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1151310#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1151296#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1151294#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1151290#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1151289#L206-2 assume !(0 == callOnFloor_~floorID#1); 1151288#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1151284#L218-5 assume { :end_inline_callOnFloor } true; 1151283#L558-1 assume { :end_inline_initPersonOnFloor } true; 1151282#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1151281#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1151280#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1151279#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1150348#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1150349#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1150372#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1150374#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1151276#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1150502#L2239 assume !(1 == ~doorState~0); 1148967#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1148968#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1149299#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1149300#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1150799#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1149416#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1149418#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1151277#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1149419#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1149015#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1149871#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1151037#L1966-2 assume !(1 == ~currentHeading~0); 1151046#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1150976#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1150977#L1982-5 assume { :end_inline_continueInDirection } true; 1149282#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1149375#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1149376#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1151144#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1157577#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1157575#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1157569#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1157562#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1157561#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1157557#L3022-2 [2022-07-14 15:45:08,120 INFO L754 eck$LassoCheckResult]: Loop: 1157557#L3022-2 assume !false; 1157558#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1157553#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1157554#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1157549#L3030 assume 1 != cleanup_~tmp___0~9#1; 1157550#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1157543#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1157544#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1157531#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1157532#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1165355#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1157514#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1157511#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1157497#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1157493#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1157488#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1157489#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1165007#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1165008#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1165335#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1173776#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1173777#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1173783#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1173779#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1173778#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1173775#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1173772#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1151717#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1151711#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1151712#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1151707#L1759-2 assume !(0 == ~currentFloorID~0); 1151708#L1765-2 assume ~currentFloorID~0 > 0; 1154021#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1154019#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1151145#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1151146#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1153848#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1153839#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1153832#L1966-3 assume !(1 == ~currentHeading~0); 1153825#L1976-9 assume !(0 == ~currentFloorID~0); 1153815#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1153810#L1982-7 assume { :end_inline_continueInDirection } true; 1153811#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1157485#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1157483#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1157484#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1153801#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1153802#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1157467#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1157466#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1157465#L3022-2 assume !false; 1157464#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1157463#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1157462#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1157461#L3030 assume 1 != cleanup_~tmp___0~9#1; 1157460#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1157459#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1157458#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1157457#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1157456#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1157455#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1151831#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1151819#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1151820#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1151803#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1151804#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1151798#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1151799#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1151796#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1151795#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1151794#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1151793#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1151791#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1151790#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1151788#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1149745#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1149746#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1150975#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1151158#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1151180#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1150362#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1150363#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1150773#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1157432#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1150873#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1150874#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1161304#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1161302#L1966-5 assume !(1 == ~currentHeading~0); 1161299#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1161297#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1161287#L1982-11 assume { :end_inline_continueInDirection } true; 1161284#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1161285#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1157915#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1157916#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165313#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1157909#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1157908#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1157578#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1157579#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1157557#L3022-2 [2022-07-14 15:45:08,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:08,120 INFO L85 PathProgramCache]: Analyzing trace with hash -434391940, now seen corresponding path program 1 times [2022-07-14 15:45:08,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:08,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637804736] [2022-07-14 15:45:08,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:08,120 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:08,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:08,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:08,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:08,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637804736] [2022-07-14 15:45:08,150 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637804736] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:08,150 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:08,150 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:45:08,150 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [716472284] [2022-07-14 15:45:08,150 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:08,151 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:08,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:08,151 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 3 times [2022-07-14 15:45:08,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:08,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [203310057] [2022-07-14 15:45:08,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:08,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:08,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:08,187 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:08,188 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:08,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [203310057] [2022-07-14 15:45:08,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [203310057] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:08,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:08,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:08,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [84053547] [2022-07-14 15:45:08,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:08,189 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:08,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:08,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:45:08,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:45:08,190 INFO L87 Difference]: Start difference. First operand 29477 states and 54220 transitions. cyclomatic complexity: 24744 Second operand has 4 states, 4 states have (on average 19.25) internal successors, (77), 4 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:08,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:08,444 INFO L93 Difference]: Finished difference Result 58837 states and 108243 transitions. [2022-07-14 15:45:08,444 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:45:08,444 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58837 states and 108243 transitions. [2022-07-14 15:45:09,007 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-14 15:45:09,189 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58837 states to 58837 states and 108243 transitions. [2022-07-14 15:45:09,190 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58837 [2022-07-14 15:45:09,233 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58837 [2022-07-14 15:45:09,233 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58837 states and 108243 transitions. [2022-07-14 15:45:09,272 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:09,272 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58837 states and 108243 transitions. [2022-07-14 15:45:09,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58837 states and 108243 transitions. [2022-07-14 15:45:09,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58837 to 29477. [2022-07-14 15:45:09,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29477 states, 29477 states have (on average 1.8390270380296503) internal successors, (54209), 29476 states have internal predecessors, (54209), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:09,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29477 states to 29477 states and 54209 transitions. [2022-07-14 15:45:09,645 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29477 states and 54209 transitions. [2022-07-14 15:45:09,645 INFO L374 stractBuchiCegarLoop]: Abstraction has 29477 states and 54209 transitions. [2022-07-14 15:45:09,645 INFO L287 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2022-07-14 15:45:09,645 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29477 states and 54209 transitions. [2022-07-14 15:45:09,728 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:09,728 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:09,728 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:09,731 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:09,732 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:09,732 INFO L752 eck$LassoCheckResult]: Stem: 1238063#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1238064#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1237359#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1237360#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1237877#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1237878#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1238762#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1238763#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1239066#L3272 assume !(0 == getOrigin_~person#1); 1239067#L3276 assume !(1 == getOrigin_~person#1); 1238017#L3280 assume !(2 == getOrigin_~person#1); 1238018#L3284 assume !(3 == getOrigin_~person#1); 1239023#L3288 assume !(4 == getOrigin_~person#1); 1239527#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1238184#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1238185#L414 assume !(0 == initPersonOnFloor_~floor#1); 1237146#L441 assume 1 == initPersonOnFloor_~floor#1; 1237147#L442 assume !(0 == initPersonOnFloor_~person#1); 1237710#L445 assume !(1 == initPersonOnFloor_~person#1); 1237711#L448 assume !(2 == initPersonOnFloor_~person#1); 1237357#L451 assume !(3 == initPersonOnFloor_~person#1); 1237358#L454 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1237396#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1238132#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1238031#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1238155#L206 assume !(0 == callOnFloor_~floorID#1); 1238157#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1237107#L218-2 assume { :end_inline_callOnFloor } true; 1237108#L558 assume { :end_inline_initPersonOnFloor } true; 1239175#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1239176#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1239699#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1239697#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1239696#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1239459#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1239702#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1239690#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1239683#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1239681#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1239677#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1239676#L206-2 assume !(0 == callOnFloor_~floorID#1); 1239675#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1239671#L218-5 assume { :end_inline_callOnFloor } true; 1239670#L558-1 assume { :end_inline_initPersonOnFloor } true; 1239669#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1239668#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1239667#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1239666#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1238687#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1238688#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1238714#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1238716#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1239658#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1238852#L2239 assume !(1 == ~doorState~0); 1237294#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1237295#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1237626#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1237627#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1239154#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1237746#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1237748#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1239659#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1237749#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1237342#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1238200#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1239405#L1966-2 assume !(1 == ~currentHeading~0); 1239411#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1239333#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1239334#L1982-5 assume { :end_inline_continueInDirection } true; 1237609#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1237705#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1237706#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1237090#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1237091#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1239209#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1238690#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1237321#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1238407#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1238408#L3022-2 [2022-07-14 15:45:09,733 INFO L754 eck$LassoCheckResult]: Loop: 1238408#L3022-2 assume !false; 1253537#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1253533#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1253534#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1253529#L3030 assume 1 != cleanup_~tmp___0~9#1; 1253530#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1253523#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1253524#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1246776#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1246777#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1259492#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1259491#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1259487#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1259469#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1259464#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1259463#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1259462#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1259461#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1259460#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1259453#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1259449#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1259450#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1259457#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1259452#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1259451#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1259448#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1259445#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1242585#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1242584#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1242582#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1242581#L1759-2 assume !(0 == ~currentFloorID~0); 1242580#L1765-2 assume ~currentFloorID~0 > 0; 1242579#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1242578#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1242577#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1242576#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1242563#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1242481#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1242479#L1966-3 assume !(1 == ~currentHeading~0); 1242478#L1976-9 assume !(0 == ~currentFloorID~0); 1242476#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1242471#L1982-7 assume { :end_inline_continueInDirection } true; 1242472#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1246644#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1246643#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1246642#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1246641#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1240580#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1240576#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1240538#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1240539#L3022-2 assume !false; 1240534#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1240535#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1240530#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1240531#L3030 assume 1 != cleanup_~tmp___0~9#1; 1240526#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1240527#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1240522#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1240523#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1246586#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1240506#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1240507#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1240487#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1240488#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1240471#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1240472#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1240467#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1240468#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1240465#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1240464#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1240463#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1240462#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1240460#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1240459#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1240457#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1238071#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1238072#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1239332#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1239530#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1239553#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1238701#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1238702#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1239129#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1240241#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1239229#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1239230#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1240259#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1240260#L1966-5 assume !(1 == ~currentHeading~0); 1246329#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1237355#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1237356#L1982-11 assume { :end_inline_continueInDirection } true; 1238361#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1253572#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1253568#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253569#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253611#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253555#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253554#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1253540#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1253541#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1238408#L3022-2 [2022-07-14 15:45:09,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:09,733 INFO L85 PathProgramCache]: Analyzing trace with hash -951044351, now seen corresponding path program 1 times [2022-07-14 15:45:09,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:09,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1371974108] [2022-07-14 15:45:09,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:09,734 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:09,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:09,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:09,772 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:09,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1371974108] [2022-07-14 15:45:09,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1371974108] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:09,772 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:09,772 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:45:09,772 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1304875037] [2022-07-14 15:45:09,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:09,773 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:09,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:09,773 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 4 times [2022-07-14 15:45:09,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:09,773 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1228197629] [2022-07-14 15:45:09,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:09,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:09,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:09,815 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:09,815 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:09,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1228197629] [2022-07-14 15:45:09,815 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1228197629] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:09,815 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:09,815 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:09,816 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1930590448] [2022-07-14 15:45:09,816 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:09,816 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:09,816 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:09,817 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:45:09,817 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:45:09,817 INFO L87 Difference]: Start difference. First operand 29477 states and 54209 transitions. cyclomatic complexity: 24733 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:10,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:10,307 INFO L93 Difference]: Finished difference Result 58837 states and 108230 transitions. [2022-07-14 15:45:10,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:45:10,308 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58837 states and 108230 transitions. [2022-07-14 15:45:10,524 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-14 15:45:10,669 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58837 states to 58837 states and 108230 transitions. [2022-07-14 15:45:10,669 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58837 [2022-07-14 15:45:10,705 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58837 [2022-07-14 15:45:10,705 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58837 states and 108230 transitions. [2022-07-14 15:45:10,740 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:10,740 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58837 states and 108230 transitions. [2022-07-14 15:45:10,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58837 states and 108230 transitions. [2022-07-14 15:45:11,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58837 to 29477. [2022-07-14 15:45:11,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29477 states, 29477 states have (on average 1.8386538657258202) internal successors, (54198), 29476 states have internal predecessors, (54198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:11,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29477 states to 29477 states and 54198 transitions. [2022-07-14 15:45:11,154 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29477 states and 54198 transitions. [2022-07-14 15:45:11,154 INFO L374 stractBuchiCegarLoop]: Abstraction has 29477 states and 54198 transitions. [2022-07-14 15:45:11,154 INFO L287 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2022-07-14 15:45:11,154 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29477 states and 54198 transitions. [2022-07-14 15:45:11,233 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:11,233 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:11,233 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:11,237 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:11,237 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:11,238 INFO L752 eck$LassoCheckResult]: Stem: 1326395#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1326396#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1325688#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1325689#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1326207#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1326208#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1327082#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1327083#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1327378#L3272 assume !(0 == getOrigin_~person#1); 1327379#L3276 assume !(1 == getOrigin_~person#1); 1326348#L3280 assume !(2 == getOrigin_~person#1); 1326349#L3284 assume !(3 == getOrigin_~person#1); 1327336#L3288 assume !(4 == getOrigin_~person#1); 1327830#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1326513#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1326514#L414 assume !(0 == initPersonOnFloor_~floor#1); 1325469#L441 assume 1 == initPersonOnFloor_~floor#1; 1325470#L442 assume !(0 == initPersonOnFloor_~person#1); 1326038#L445 assume !(1 == initPersonOnFloor_~person#1); 1326039#L448 assume !(2 == initPersonOnFloor_~person#1); 1325684#L451 assume !(3 == initPersonOnFloor_~person#1); 1325685#L454 assume !(4 == initPersonOnFloor_~person#1); 1325724#L457 assume !(5 == initPersonOnFloor_~person#1); 1325725#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1326463#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1326363#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1326485#L206 assume !(0 == callOnFloor_~floorID#1); 1326487#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1325435#L218-2 assume { :end_inline_callOnFloor } true; 1325436#L558 assume { :end_inline_initPersonOnFloor } true; 1327487#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1327488#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1327997#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1327995#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1327994#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1327770#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1328001#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1327985#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1327980#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1327978#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1327974#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1327973#L206-2 assume !(0 == callOnFloor_~floorID#1); 1327972#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1327968#L218-5 assume { :end_inline_callOnFloor } true; 1327967#L558-1 assume { :end_inline_initPersonOnFloor } true; 1327966#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1327965#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1327964#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1327963#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1327015#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1327016#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1327037#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1327039#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1327954#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1327165#L2239 assume !(1 == ~doorState~0); 1325623#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1325624#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1325956#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1325957#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1327467#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1326074#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1326076#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1327956#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1326077#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1325671#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1326527#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1327717#L1966-2 assume !(1 == ~currentHeading~0); 1327726#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1327652#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1327653#L1982-5 assume { :end_inline_continueInDirection } true; 1325942#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1326033#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1326034#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1327821#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1334721#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1334720#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1334717#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1334710#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1326738#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1326739#L3022-2 [2022-07-14 15:45:11,238 INFO L754 eck$LassoCheckResult]: Loop: 1326739#L3022-2 assume !false; 1335163#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1335162#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1335161#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1335160#L3030 assume 1 != cleanup_~tmp___0~9#1; 1335159#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1335158#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1335157#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1335155#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1335156#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1347498#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1348047#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1342239#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1342107#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1342102#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1342101#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1342100#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1339869#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1339867#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1339860#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1339857#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1339858#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1339864#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1339859#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1339856#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1339854#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1339853#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1330712#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1330711#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1330709#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1330708#L1759-2 assume !(0 == ~currentFloorID~0); 1330707#L1765-2 assume ~currentFloorID~0 > 0; 1330706#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1325703#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1325704#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1330473#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1330522#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1330514#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1330506#L1966-3 assume !(1 == ~currentHeading~0); 1330499#L1976-9 assume !(0 == ~currentFloorID~0); 1330489#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1330484#L1982-7 assume { :end_inline_continueInDirection } true; 1330485#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1335025#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1335022#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1335023#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1335024#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1328535#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1328531#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1328492#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1328493#L3022-2 assume !false; 1328488#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1328489#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1328484#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1328485#L3030 assume 1 != cleanup_~tmp___0~9#1; 1328480#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1328481#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1328476#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1328477#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1335005#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1328463#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1328464#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1328443#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1328444#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1328427#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1328428#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1328423#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1328424#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1328421#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1328420#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1328419#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1328418#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1328416#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1328415#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1328414#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1328413#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1328412#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1328411#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1327861#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1327862#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1329781#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1329779#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1329580#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1329263#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1327540#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1327541#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1334584#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1327069#L1966-5 assume !(1 == ~currentHeading~0); 1327071#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1334854#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1327911#L1982-11 assume { :end_inline_continueInDirection } true; 1326690#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1335183#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1335182#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335181#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335173#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335169#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335166#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1335165#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1335164#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1326739#L3022-2 [2022-07-14 15:45:11,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:11,239 INFO L85 PathProgramCache]: Analyzing trace with hash 330843171, now seen corresponding path program 1 times [2022-07-14 15:45:11,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:11,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [378366659] [2022-07-14 15:45:11,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:11,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:11,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:11,258 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:11,258 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:11,258 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [378366659] [2022-07-14 15:45:11,259 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [378366659] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:11,259 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:11,259 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:45:11,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1651631381] [2022-07-14 15:45:11,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:11,267 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:11,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:11,267 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 5 times [2022-07-14 15:45:11,267 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:11,267 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1212201650] [2022-07-14 15:45:11,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:11,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:11,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:11,310 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:11,310 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:11,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1212201650] [2022-07-14 15:45:11,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1212201650] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:11,311 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:11,311 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:11,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995629807] [2022-07-14 15:45:11,311 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:11,311 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:11,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:11,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:45:11,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:45:11,312 INFO L87 Difference]: Start difference. First operand 29477 states and 54198 transitions. cyclomatic complexity: 24722 Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:11,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:11,660 INFO L93 Difference]: Finished difference Result 58819 states and 108207 transitions. [2022-07-14 15:45:11,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:45:11,661 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58819 states and 108207 transitions. [2022-07-14 15:45:11,876 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 52512 [2022-07-14 15:45:12,031 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58819 states to 58819 states and 108207 transitions. [2022-07-14 15:45:12,031 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58819 [2022-07-14 15:45:12,071 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58819 [2022-07-14 15:45:12,071 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58819 states and 108207 transitions. [2022-07-14 15:45:12,109 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:12,109 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58819 states and 108207 transitions. [2022-07-14 15:45:12,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58819 states and 108207 transitions. [2022-07-14 15:45:12,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58819 to 29477. [2022-07-14 15:45:12,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29477 states, 29477 states have (on average 1.8386199409709265) internal successors, (54197), 29476 states have internal predecessors, (54197), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:12,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29477 states to 29477 states and 54197 transitions. [2022-07-14 15:45:12,488 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29477 states and 54197 transitions. [2022-07-14 15:45:12,488 INFO L374 stractBuchiCegarLoop]: Abstraction has 29477 states and 54197 transitions. [2022-07-14 15:45:12,488 INFO L287 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2022-07-14 15:45:12,488 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29477 states and 54197 transitions. [2022-07-14 15:45:12,568 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:12,568 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:12,569 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:12,572 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:12,572 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:12,572 INFO L752 eck$LassoCheckResult]: Stem: 1414694#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1414695#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1413994#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1413995#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1414508#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1414509#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1415374#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1415375#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1415665#L3272 assume !(0 == getOrigin_~person#1); 1415666#L3276 assume !(1 == getOrigin_~person#1); 1414646#L3280 assume !(2 == getOrigin_~person#1); 1414647#L3284 assume !(3 == getOrigin_~person#1); 1415624#L3288 assume !(4 == getOrigin_~person#1); 1416081#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1414812#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1414813#L414 assume !(0 == initPersonOnFloor_~floor#1); 1413776#L441 assume 1 == initPersonOnFloor_~floor#1; 1413777#L442 assume !(0 == initPersonOnFloor_~person#1); 1414341#L445 assume !(1 == initPersonOnFloor_~person#1); 1414342#L448 assume !(2 == initPersonOnFloor_~person#1); 1413990#L451 assume !(3 == initPersonOnFloor_~person#1); 1413991#L454 assume !(4 == initPersonOnFloor_~person#1); 1414030#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1414031#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1414761#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1414662#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1414783#L206 assume !(0 == callOnFloor_~floorID#1); 1414785#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1413742#L218-2 assume { :end_inline_callOnFloor } true; 1413743#L558 assume { :end_inline_initPersonOnFloor } true; 1415760#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1415761#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1416241#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1416238#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1416236#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1415446#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1415432#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1415433#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1416225#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1416223#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1416219#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1416218#L206-2 assume !(0 == callOnFloor_~floorID#1); 1416217#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1416213#L218-5 assume { :end_inline_callOnFloor } true; 1416212#L558-1 assume { :end_inline_initPersonOnFloor } true; 1416211#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416210#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416209#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1416208#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1415306#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1415307#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1415330#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1415332#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1416199#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1415459#L2239 assume !(1 == ~doorState~0); 1413929#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1413930#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1414262#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1414263#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1415742#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1414379#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1414381#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1416201#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1414382#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1413977#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1414826#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1415973#L1966-2 assume !(1 == ~currentHeading~0); 1415978#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1415914#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1415915#L1982-5 assume { :end_inline_continueInDirection } true; 1414245#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1414339#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1414340#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1413725#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1413726#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1415793#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1415309#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1413956#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1414940#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1415029#L3022-2 [2022-07-14 15:45:12,572 INFO L754 eck$LassoCheckResult]: Loop: 1415029#L3022-2 assume !false; 1423314#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1423313#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1423312#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1423311#L3030 assume 1 != cleanup_~tmp___0~9#1; 1423310#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1423309#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1423308#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1423306#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1423304#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1423303#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1423302#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1423299#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1423270#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1423266#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1423231#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1423232#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1423201#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1423202#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1430110#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1436781#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1436782#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1436794#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1436785#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1436783#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1436774#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1436767#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1419199#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1419197#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1419195#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1416484#L1759-2 assume !(0 == ~currentFloorID~0); 1416485#L1765-2 assume ~currentFloorID~0 > 0; 1416540#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416541#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416072#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1416073#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1418735#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1418727#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1418719#L1966-3 assume !(1 == ~currentHeading~0); 1418712#L1976-9 assume !(0 == ~currentFloorID~0); 1418702#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1418696#L1982-7 assume { :end_inline_continueInDirection } true; 1418695#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1418694#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1418692#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1418693#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1418235#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1418236#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1416767#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1416768#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1416732#L3022-2 assume !false; 1416733#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1416728#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1416729#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1416724#L3030 assume 1 != cleanup_~tmp___0~9#1; 1416725#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416720#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416721#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1416715#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1416716#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416709#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1416700#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416697#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1416678#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1416674#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1437004#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1416668#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1416669#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1416666#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1416665#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1416664#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1416663#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1416661#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1416660#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1416658#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1414701#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1414702#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1415913#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1416086#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1416109#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1415320#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1415321#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1415720#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1417784#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1415814#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1415815#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1416584#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1416585#L1966-5 assume !(1 == ~currentHeading~0); 1423089#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1414891#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1416153#L1982-11 assume { :end_inline_continueInDirection } true; 1414983#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1426671#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1426670#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1426669#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1423327#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1423320#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1423317#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1423316#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1423315#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1415029#L3022-2 [2022-07-14 15:45:12,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:12,573 INFO L85 PathProgramCache]: Analyzing trace with hash -930074079, now seen corresponding path program 1 times [2022-07-14 15:45:12,573 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:12,573 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [360591581] [2022-07-14 15:45:12,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:12,573 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:12,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:12,620 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:12,621 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:12,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [360591581] [2022-07-14 15:45:12,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [360591581] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:12,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:12,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:12,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [621178295] [2022-07-14 15:45:12,621 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:12,621 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:12,621 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:12,621 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 6 times [2022-07-14 15:45:12,622 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:12,622 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1120331418] [2022-07-14 15:45:12,622 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:12,622 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:12,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:12,652 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:12,652 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:12,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1120331418] [2022-07-14 15:45:12,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1120331418] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:12,652 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:12,652 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:12,653 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1755821299] [2022-07-14 15:45:12,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:12,653 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:12,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:12,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 15:45:12,653 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-14 15:45:12,653 INFO L87 Difference]: Start difference. First operand 29477 states and 54197 transitions. cyclomatic complexity: 24721 Second operand has 7 states, 7 states have (on average 11.285714285714286) internal successors, (79), 7 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:13,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:13,300 INFO L93 Difference]: Finished difference Result 117547 states and 216280 transitions. [2022-07-14 15:45:13,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:45:13,301 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 117547 states and 216280 transitions. [2022-07-14 15:45:13,781 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 105024 [2022-07-14 15:45:14,417 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 117547 states to 117547 states and 216280 transitions. [2022-07-14 15:45:14,417 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117547 [2022-07-14 15:45:14,492 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117547 [2022-07-14 15:45:14,492 INFO L73 IsDeterministic]: Start isDeterministic. Operand 117547 states and 216280 transitions. [2022-07-14 15:45:14,551 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:14,551 INFO L369 hiAutomatonCegarLoop]: Abstraction has 117547 states and 216280 transitions. [2022-07-14 15:45:14,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117547 states and 216280 transitions. [2022-07-14 15:45:15,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117547 to 29481. [2022-07-14 15:45:15,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29481 states, 29481 states have (on average 1.838472236355619) internal successors, (54200), 29480 states have internal predecessors, (54200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:15,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29481 states to 29481 states and 54200 transitions. [2022-07-14 15:45:15,116 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29481 states and 54200 transitions. [2022-07-14 15:45:15,116 INFO L374 stractBuchiCegarLoop]: Abstraction has 29481 states and 54200 transitions. [2022-07-14 15:45:15,116 INFO L287 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2022-07-14 15:45:15,116 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29481 states and 54200 transitions. [2022-07-14 15:45:15,194 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:15,194 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:15,194 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:15,197 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:15,197 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:15,197 INFO L752 eck$LassoCheckResult]: Stem: 1561751#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1561752#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1561047#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1561048#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1561562#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1561563#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1562446#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1562447#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1562745#L3272 assume !(0 == getOrigin_~person#1); 1562746#L3276 assume !(1 == getOrigin_~person#1); 1561704#L3280 assume !(2 == getOrigin_~person#1); 1561705#L3284 assume !(3 == getOrigin_~person#1); 1562704#L3288 assume !(4 == getOrigin_~person#1); 1563175#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1561869#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1561870#L414 assume !(0 == initPersonOnFloor_~floor#1); 1560828#L441 assume 1 == initPersonOnFloor_~floor#1; 1560829#L442 assume !(0 == initPersonOnFloor_~person#1); 1561394#L445 assume !(1 == initPersonOnFloor_~person#1); 1561395#L448 assume !(2 == initPersonOnFloor_~person#1); 1561043#L451 assume !(3 == initPersonOnFloor_~person#1); 1561044#L454 assume !(4 == initPersonOnFloor_~person#1); 1561083#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1561084#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1561819#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1561718#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1561719#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1561841#L206 assume !(0 == callOnFloor_~floorID#1); 1561842#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1562066#L218-2 assume { :end_inline_callOnFloor } true; 1562946#L558 assume { :end_inline_initPersonOnFloor } true; 1562947#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1562246#L3272-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1562014#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1561655#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1561656#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1562520#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1562506#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1562507#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1563310#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1563309#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1563304#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1563299#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1563298#L206-2 assume !(0 == callOnFloor_~floorID#1); 1563297#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1563293#L218-5 assume { :end_inline_callOnFloor } true; 1563292#L558-1 assume { :end_inline_initPersonOnFloor } true; 1563291#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1563290#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1563289#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1563288#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1562376#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1562377#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1562400#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1562402#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1563285#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1562535#L2239 assume !(1 == ~doorState~0); 1560982#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1560983#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1561315#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1561316#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1562831#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1561432#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1561434#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1563286#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1561435#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1561030#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1561883#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1563058#L1966-2 assume !(1 == ~currentHeading~0); 1563066#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1563000#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1563001#L1982-5 assume { :end_inline_continueInDirection } true; 1561298#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1563737#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1563164#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1563165#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1562881#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1562882#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1562380#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1561009#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1562001#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1562094#L3022-2 [2022-07-14 15:45:15,198 INFO L754 eck$LassoCheckResult]: Loop: 1562094#L3022-2 assume !false; 1570468#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1570467#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1570466#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1570465#L3030 assume 1 != cleanup_~tmp___0~9#1; 1570464#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1570463#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1570462#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1570460#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1570458#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1570459#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1576817#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1576811#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1576567#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1576562#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1576561#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1576560#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1576559#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1576558#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1576551#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1576547#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1576548#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1576555#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1576550#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1576549#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1576546#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1576543#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1566125#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1566122#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1566109#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1566110#L1759-2 assume !(0 == ~currentFloorID~0); 1566127#L1765-2 assume ~currentFloorID~0 > 0; 1566123#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1566121#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1566120#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1566087#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1565979#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1565980#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1566171#L1966-3 assume !(1 == ~currentHeading~0); 1566168#L1976-9 assume !(0 == ~currentFloorID~0); 1566156#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1565780#L1982-7 assume { :end_inline_continueInDirection } true; 1565781#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1570343#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1570340#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1570341#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1570342#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1565756#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1565752#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1563827#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1563828#L3022-2 assume !false; 1563822#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1563823#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1563818#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1563819#L3030 assume 1 != cleanup_~tmp___0~9#1; 1563814#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1563815#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1563810#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1563811#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1570321#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1570354#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1563789#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1563775#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1563776#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1563759#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1563760#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1563755#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1563756#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1563753#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1563752#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1563751#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1563750#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1563748#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1563747#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1563745#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1561758#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1561759#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1562999#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1563179#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1563199#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1568582#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1562805#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1562807#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1568056#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1562900#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1562901#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1570114#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1570115#L1966-5 assume !(1 == ~currentHeading~0); 1570231#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1561950#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1563243#L1982-11 assume { :end_inline_continueInDirection } true; 1562047#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1570488#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1570487#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1570486#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1570485#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1570483#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1570477#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1570470#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1570469#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1562094#L3022-2 [2022-07-14 15:45:15,198 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:15,199 INFO L85 PathProgramCache]: Analyzing trace with hash -2124280855, now seen corresponding path program 1 times [2022-07-14 15:45:15,199 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:15,199 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [575557483] [2022-07-14 15:45:15,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:15,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:15,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:15,216 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:15,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:15,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [575557483] [2022-07-14 15:45:15,217 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [575557483] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:15,217 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:15,217 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:45:15,217 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2037247742] [2022-07-14 15:45:15,217 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:15,217 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:15,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:15,218 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 3 times [2022-07-14 15:45:15,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:15,218 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1400067114] [2022-07-14 15:45:15,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:15,218 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:15,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:15,241 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:15,241 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:15,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1400067114] [2022-07-14 15:45:15,241 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1400067114] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:15,241 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:15,241 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:15,241 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [777113291] [2022-07-14 15:45:15,242 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:15,242 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:15,242 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:15,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:45:15,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:45:15,242 INFO L87 Difference]: Start difference. First operand 29481 states and 54200 transitions. cyclomatic complexity: 24720 Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:15,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:15,340 INFO L93 Difference]: Finished difference Result 29449 states and 54148 transitions. [2022-07-14 15:45:15,341 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:45:15,341 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29449 states and 54148 transitions. [2022-07-14 15:45:15,813 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:15,887 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29449 states to 29449 states and 54148 transitions. [2022-07-14 15:45:15,888 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29449 [2022-07-14 15:45:15,909 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29449 [2022-07-14 15:45:15,909 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29449 states and 54148 transitions. [2022-07-14 15:45:15,931 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:15,931 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29449 states and 54148 transitions. [2022-07-14 15:45:15,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29449 states and 54148 transitions. [2022-07-14 15:45:16,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29449 to 29449. [2022-07-14 15:45:16,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29449 states, 29449 states have (on average 1.8387042004821896) internal successors, (54148), 29448 states have internal predecessors, (54148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:16,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29449 states to 29449 states and 54148 transitions. [2022-07-14 15:45:16,238 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29449 states and 54148 transitions. [2022-07-14 15:45:16,238 INFO L374 stractBuchiCegarLoop]: Abstraction has 29449 states and 54148 transitions. [2022-07-14 15:45:16,238 INFO L287 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2022-07-14 15:45:16,238 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29449 states and 54148 transitions. [2022-07-14 15:45:16,323 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:16,323 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:16,323 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:16,326 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:16,327 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:16,327 INFO L752 eck$LassoCheckResult]: Stem: 1620676#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1620677#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1619984#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1619985#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1620491#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1620492#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1621358#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1621359#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1621652#L3272 assume !(0 == getOrigin_~person#1); 1621653#L3276 assume !(1 == getOrigin_~person#1); 1620629#L3280 assume !(2 == getOrigin_~person#1); 1620630#L3284 assume !(3 == getOrigin_~person#1); 1621612#L3288 assume !(4 == getOrigin_~person#1); 1622075#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1620796#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1620797#L414 assume !(0 == initPersonOnFloor_~floor#1); 1619766#L441 assume 1 == initPersonOnFloor_~floor#1; 1619767#L442 assume !(0 == initPersonOnFloor_~person#1); 1620328#L445 assume !(1 == initPersonOnFloor_~person#1); 1620329#L448 assume !(2 == initPersonOnFloor_~person#1); 1619980#L451 assume !(3 == initPersonOnFloor_~person#1); 1619981#L454 assume !(4 == initPersonOnFloor_~person#1); 1620020#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1620021#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1620745#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1620643#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1620644#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1620768#L206 assume !(0 == callOnFloor_~floorID#1); 1620770#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1619735#L218-2 assume { :end_inline_callOnFloor } true; 1619736#L558 assume { :end_inline_initPersonOnFloor } true; 1622249#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1622248#L3272-1 assume !(0 == getOrigin_~person#1); 1622247#L3276-1 assume !(1 == getOrigin_~person#1); 1622244#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1622243#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1622241#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1622237#L441-1 assume 1 == initPersonOnFloor_~floor#1; 1622236#L442-2 assume !(0 == initPersonOnFloor_~person#1); 1622235#L445-2 assume !(1 == initPersonOnFloor_~person#1); 1622222#L448-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1622215#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1622214#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1622213#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1622209#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1622208#L206-2 assume !(0 == callOnFloor_~floorID#1); 1622207#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1622203#L218-5 assume { :end_inline_callOnFloor } true; 1622202#L558-1 assume { :end_inline_initPersonOnFloor } true; 1622201#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622200#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622199#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1622198#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1621296#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1621297#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1621319#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1621321#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1622194#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1621447#L2239 assume !(1 == ~doorState~0); 1619919#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1619920#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1620250#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1620251#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1621738#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1620364#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1620366#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1622196#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1620367#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1619967#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1620810#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1621967#L1966-2 assume !(1 == ~currentHeading~0); 1621974#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1621907#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1621908#L1982-5 assume { :end_inline_continueInDirection } true; 1620234#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1622331#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1622065#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1622066#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1629155#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1629156#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1621298#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1619946#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1621017#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1621018#L3022-2 [2022-07-14 15:45:16,327 INFO L754 eck$LassoCheckResult]: Loop: 1621018#L3022-2 assume !false; 1629337#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1629338#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1629333#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1629334#L3030 assume 1 != cleanup_~tmp___0~9#1; 1629329#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1629330#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1629325#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1629326#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1629319#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1629321#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1642726#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1642722#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1642708#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1642703#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1642702#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1642701#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1642700#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1642699#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1642693#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1642690#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1642691#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1642697#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1642692#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1642689#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1642687#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1642686#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1623379#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1623378#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1623377#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1623376#L1759-2 assume !(0 == ~currentFloorID~0); 1623375#L1765-2 assume ~currentFloorID~0 > 0; 1623374#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622524#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622525#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1623290#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1623263#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1623116#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1623075#L1966-3 assume !(1 == ~currentHeading~0); 1623047#L1976-9 assume !(0 == ~currentFloorID~0); 1623032#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1623027#L1982-7 assume { :end_inline_continueInDirection } true; 1623024#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623021#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1623020#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1623017#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1623018#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1622995#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1622986#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1622955#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1622952#L3022-2 assume !false; 1622951#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1622950#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1622949#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1622948#L3030 assume 1 != cleanup_~tmp___0~9#1; 1622947#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622946#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622945#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1622943#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1622941#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622936#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1622924#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622912#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1622913#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1622886#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1622887#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1622876#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1622877#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1622870#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1622869#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1622868#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1622867#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1622865#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1622864#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1622862#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1620683#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1620684#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1621906#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1622082#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1622103#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1622618#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1622616#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1622611#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1622612#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1622831#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1622607#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1622813#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1622814#L1966-5 assume !(1 == ~currentHeading~0); 1629119#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1629120#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1622149#L1982-11 assume { :end_inline_continueInDirection } true; 1620971#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1636142#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1636143#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1636076#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1635994#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1635995#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1629354#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1629346#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1629341#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1621018#L3022-2 [2022-07-14 15:45:16,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:16,328 INFO L85 PathProgramCache]: Analyzing trace with hash -1026798450, now seen corresponding path program 1 times [2022-07-14 15:45:16,328 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:16,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1084164606] [2022-07-14 15:45:16,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:16,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:16,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:16,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:16,354 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:16,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1084164606] [2022-07-14 15:45:16,354 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1084164606] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:16,354 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:16,354 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:45:16,354 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [825973174] [2022-07-14 15:45:16,354 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:16,355 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:16,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:16,355 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 4 times [2022-07-14 15:45:16,355 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:16,355 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1602018318] [2022-07-14 15:45:16,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:16,356 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:16,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:16,384 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:16,384 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:16,384 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1602018318] [2022-07-14 15:45:16,385 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1602018318] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:16,385 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:16,385 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:16,385 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259069714] [2022-07-14 15:45:16,385 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:16,385 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:16,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:16,386 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:45:16,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:45:16,386 INFO L87 Difference]: Start difference. First operand 29449 states and 54148 transitions. cyclomatic complexity: 24700 Second operand has 5 states, 5 states have (on average 16.6) internal successors, (83), 5 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:16,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:16,513 INFO L93 Difference]: Finished difference Result 29437 states and 54130 transitions. [2022-07-14 15:45:16,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:45:16,514 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29437 states and 54130 transitions. [2022-07-14 15:45:16,632 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:16,718 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29437 states to 29437 states and 54130 transitions. [2022-07-14 15:45:16,718 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29437 [2022-07-14 15:45:16,742 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29437 [2022-07-14 15:45:16,743 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29437 states and 54130 transitions. [2022-07-14 15:45:16,766 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:16,766 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29437 states and 54130 transitions. [2022-07-14 15:45:16,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29437 states and 54130 transitions. [2022-07-14 15:45:17,241 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29437 to 29437. [2022-07-14 15:45:17,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29437 states, 29437 states have (on average 1.8388422733294834) internal successors, (54130), 29436 states have internal predecessors, (54130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:17,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29437 states to 29437 states and 54130 transitions. [2022-07-14 15:45:17,309 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29437 states and 54130 transitions. [2022-07-14 15:45:17,309 INFO L374 stractBuchiCegarLoop]: Abstraction has 29437 states and 54130 transitions. [2022-07-14 15:45:17,309 INFO L287 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2022-07-14 15:45:17,309 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29437 states and 54130 transitions. [2022-07-14 15:45:17,381 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:17,382 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:17,382 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:17,385 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:17,385 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:17,385 INFO L752 eck$LassoCheckResult]: Stem: 1679584#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1679585#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1678888#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1678889#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1679400#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1679401#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1680261#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1680262#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1680544#L3272 assume !(0 == getOrigin_~person#1); 1680545#L3276 assume !(1 == getOrigin_~person#1); 1679537#L3280 assume !(2 == getOrigin_~person#1); 1679538#L3284 assume !(3 == getOrigin_~person#1); 1680506#L3288 assume !(4 == getOrigin_~person#1); 1680962#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1679699#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1679700#L414 assume !(0 == initPersonOnFloor_~floor#1); 1678669#L441 assume 1 == initPersonOnFloor_~floor#1; 1678670#L442 assume !(0 == initPersonOnFloor_~person#1); 1679232#L445 assume !(1 == initPersonOnFloor_~person#1); 1679233#L448 assume !(2 == initPersonOnFloor_~person#1); 1678884#L451 assume !(3 == initPersonOnFloor_~person#1); 1678885#L454 assume !(4 == initPersonOnFloor_~person#1); 1678924#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1678925#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1679652#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1679551#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1679552#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1679671#L206 assume !(0 == callOnFloor_~floorID#1); 1679673#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1678638#L218-2 assume { :end_inline_callOnFloor } true; 1678639#L558 assume { :end_inline_initPersonOnFloor } true; 1680654#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1680655#L3272-1 assume !(0 == getOrigin_~person#1); 1679697#L3276-1 assume !(1 == getOrigin_~person#1); 1679698#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1681124#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1679489#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1679490#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1680909#L468-1 assume !(2 == initPersonOnFloor_~floor#1); 1678813#L495-1 assume !(3 == initPersonOnFloor_~floor#1); 1678815#L522-2 assume !(4 == initPersonOnFloor_~floor#1); 1679463#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1680463#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1680557#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1681096#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1681095#L206-2 assume !(0 == callOnFloor_~floorID#1); 1681094#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1681090#L218-5 assume { :end_inline_callOnFloor } true; 1681089#L558-1 assume { :end_inline_initPersonOnFloor } true; 1681088#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1681087#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1681086#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1681085#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1680199#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1680200#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1680222#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1680224#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1681082#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1680345#L2239 assume !(1 == ~doorState~0); 1678823#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1678824#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1679153#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1679154#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1680634#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1679271#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1679273#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1681083#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1679274#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1678871#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1679714#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1680864#L1966-2 assume !(1 == ~currentHeading~0); 1680869#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1680801#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1680802#L1982-5 assume { :end_inline_continueInDirection } true; 1679136#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1679230#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1679231#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1678621#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1678622#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1680684#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1680202#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1678850#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1679924#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1679925#L3022-2 [2022-07-14 15:45:17,386 INFO L754 eck$LassoCheckResult]: Loop: 1679925#L3022-2 assume !false; 1688236#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1688232#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1688233#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1688228#L3030 assume 1 != cleanup_~tmp___0~9#1; 1688229#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1688224#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1688225#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1688219#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1688220#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1707327#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1707965#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1707961#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1707723#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1707718#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1707717#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1707716#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1707715#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1707714#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1679073#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1679074#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1679818#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1679079#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1678917#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1678918#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1680631#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1686898#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1686897#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1686896#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1686895#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1686894#L1759-2 assume !(0 == ~currentFloorID~0); 1686893#L1765-2 assume ~currentFloorID~0 > 0; 1686890#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1686891#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1686892#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1686888#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1686889#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1687604#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1687606#L1966-3 assume !(1 == ~currentHeading~0); 1687830#L1976-9 assume !(0 == ~currentFloorID~0); 1687821#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1687817#L1982-7 assume { :end_inline_continueInDirection } true; 1687818#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1688138#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1688137#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1688136#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1688135#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1687789#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1687785#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1687739#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1687740#L3022-2 assume !false; 1687730#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1687731#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1687719#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1687720#L3030 assume 1 != cleanup_~tmp___0~9#1; 1687707#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1687708#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1687642#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1687643#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1681443#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1681441#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1681430#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1681416#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1681417#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1681400#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1681401#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1681396#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1681397#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1681394#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1681393#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1681392#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1681391#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1681389#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1681388#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1681386#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1681385#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1681384#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1681382#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1680992#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1679020#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1679250#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1680608#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1680610#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1687701#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1680705#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1680706#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1687648#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1680250#L1966-5 assume !(1 == ~currentHeading~0); 1680252#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1679782#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1681038#L1982-11 assume { :end_inline_continueInDirection } true; 1679877#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1691659#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1691658#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1691657#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1691656#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1691746#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1691745#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1688239#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1688240#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1679925#L3022-2 [2022-07-14 15:45:17,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:17,386 INFO L85 PathProgramCache]: Analyzing trace with hash 1238935822, now seen corresponding path program 1 times [2022-07-14 15:45:17,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:17,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [769190599] [2022-07-14 15:45:17,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:17,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:17,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:17,419 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:17,419 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:17,419 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [769190599] [2022-07-14 15:45:17,419 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [769190599] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:17,419 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:17,420 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:45:17,420 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1111811333] [2022-07-14 15:45:17,420 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:17,420 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:17,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:17,421 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 7 times [2022-07-14 15:45:17,421 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:17,421 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1082321508] [2022-07-14 15:45:17,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:17,421 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:17,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:17,454 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:17,454 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:17,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1082321508] [2022-07-14 15:45:17,454 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1082321508] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:17,454 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:17,454 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:17,454 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [535290175] [2022-07-14 15:45:17,454 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:17,454 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:17,455 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:17,455 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:45:17,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:45:17,455 INFO L87 Difference]: Start difference. First operand 29437 states and 54130 transitions. cyclomatic complexity: 24694 Second operand has 4 states, 4 states have (on average 20.75) internal successors, (83), 4 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:17,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:17,548 INFO L93 Difference]: Finished difference Result 29409 states and 54088 transitions. [2022-07-14 15:45:17,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:45:17,548 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29409 states and 54088 transitions. [2022-07-14 15:45:17,654 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:17,731 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29409 states to 29409 states and 54088 transitions. [2022-07-14 15:45:17,731 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29409 [2022-07-14 15:45:17,753 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29409 [2022-07-14 15:45:17,753 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29409 states and 54088 transitions. [2022-07-14 15:45:17,770 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:17,771 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29409 states and 54088 transitions. [2022-07-14 15:45:17,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29409 states and 54088 transitions. [2022-07-14 15:45:17,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29409 to 29409. [2022-07-14 15:45:17,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29409 states, 29409 states have (on average 1.8391648814988608) internal successors, (54088), 29408 states have internal predecessors, (54088), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:18,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29409 states to 29409 states and 54088 transitions. [2022-07-14 15:45:18,030 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29409 states and 54088 transitions. [2022-07-14 15:45:18,030 INFO L374 stractBuchiCegarLoop]: Abstraction has 29409 states and 54088 transitions. [2022-07-14 15:45:18,030 INFO L287 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2022-07-14 15:45:18,030 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29409 states and 54088 transitions. [2022-07-14 15:45:18,111 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:18,111 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:18,111 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:18,114 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:18,114 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:18,115 INFO L752 eck$LassoCheckResult]: Stem: 1738440#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1738441#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1737745#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1737746#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1738257#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1738258#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1739114#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1739115#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1739410#L3272 assume !(0 == getOrigin_~person#1); 1739411#L3276 assume !(1 == getOrigin_~person#1); 1738391#L3280 assume !(2 == getOrigin_~person#1); 1738392#L3284 assume !(3 == getOrigin_~person#1); 1739371#L3288 assume !(4 == getOrigin_~person#1); 1739823#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1738556#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1738557#L414 assume !(0 == initPersonOnFloor_~floor#1); 1737529#L441 assume 1 == initPersonOnFloor_~floor#1; 1737530#L442 assume !(0 == initPersonOnFloor_~person#1); 1738090#L445 assume !(1 == initPersonOnFloor_~person#1); 1738091#L448 assume !(2 == initPersonOnFloor_~person#1); 1737741#L451 assume !(3 == initPersonOnFloor_~person#1); 1737742#L454 assume !(4 == initPersonOnFloor_~person#1); 1737781#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1737782#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1738508#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1738407#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1738408#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1738528#L206 assume !(0 == callOnFloor_~floorID#1); 1738530#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1737498#L218-2 assume { :end_inline_callOnFloor } true; 1737499#L558 assume { :end_inline_initPersonOnFloor } true; 1739521#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1738926#L3272-1 assume !(0 == getOrigin_~person#1); 1738554#L3276-1 assume !(1 == getOrigin_~person#1); 1738555#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1738697#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1738342#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1738343#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1739770#L468-1 assume 2 == initPersonOnFloor_~floor#1; 1739647#L469-2 assume !(0 == initPersonOnFloor_~person#1); 1738746#L472-2 assume !(1 == initPersonOnFloor_~person#1); 1738747#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1738771#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1739323#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1739422#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1739943#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1739942#L206-2 assume !(0 == callOnFloor_~floorID#1); 1739941#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1739937#L218-5 assume { :end_inline_callOnFloor } true; 1739936#L558-1 assume { :end_inline_initPersonOnFloor } true; 1739935#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1739934#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1739933#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1739931#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1739049#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1739050#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1739073#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1739075#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1739928#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1739203#L2239 assume !(1 == ~doorState~0); 1737680#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1737681#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1738010#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1738011#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1739502#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1738128#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1738130#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1739930#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1738131#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1737728#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1738570#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1739719#L1966-2 assume !(1 == ~currentHeading~0); 1739725#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1739662#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1739663#L1982-5 assume { :end_inline_continueInDirection } true; 1737993#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1738088#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1738089#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1737481#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1737482#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1739548#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1739051#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1737707#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1738684#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1738775#L3022-2 [2022-07-14 15:45:18,115 INFO L754 eck$LassoCheckResult]: Loop: 1738775#L3022-2 assume !false; 1747037#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1747036#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1747035#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1747034#L3030 assume 1 != cleanup_~tmp___0~9#1; 1747033#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1747032#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1747031#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1747029#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1747027#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1747028#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1758006#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1753909#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1753910#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1757458#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1757456#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1757454#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1757452#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1757449#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1757448#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1757446#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1757447#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1757445#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1757440#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1757438#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1757437#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1757436#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1741063#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1740113#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1740114#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1740108#L1759-2 assume !(0 == ~currentFloorID~0); 1740105#L1765-2 assume ~currentFloorID~0 > 0; 1740103#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1740104#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1740109#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1740101#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1740102#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1740792#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1740789#L1966-3 assume !(1 == ~currentHeading~0); 1740786#L1976-9 assume !(0 == ~currentFloorID~0); 1740762#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1740757#L1982-7 assume { :end_inline_continueInDirection } true; 1740758#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1746963#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1746960#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1746961#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1746962#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1740734#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1740730#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1740600#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1740601#L3022-2 assume !false; 1740596#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1740597#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1740572#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1740573#L3030 assume 1 != cleanup_~tmp___0~9#1; 1740567#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1740568#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1740543#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1740544#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1746943#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1740528#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1740529#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1740504#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1740505#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1740479#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1740480#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1740475#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1740476#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1740473#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1740472#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1740470#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1740469#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1740465#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1740458#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1740454#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1740447#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1739660#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1739661#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1739827#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1738588#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1740444#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1740442#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1740440#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1740441#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1739564#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1737944#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1739330#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1739103#L1966-5 assume !(1 == ~currentHeading~0); 1739105#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1737743#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1737744#L1982-11 assume { :end_inline_continueInDirection } true; 1738730#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1747057#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1747056#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1747055#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1747054#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1747052#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1747046#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1747039#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1747038#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1738775#L3022-2 [2022-07-14 15:45:18,115 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:18,115 INFO L85 PathProgramCache]: Analyzing trace with hash -1871011021, now seen corresponding path program 1 times [2022-07-14 15:45:18,115 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:18,115 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [10400025] [2022-07-14 15:45:18,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:18,115 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:18,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:18,142 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:18,142 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:18,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [10400025] [2022-07-14 15:45:18,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [10400025] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:18,142 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:18,143 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:45:18,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1654171987] [2022-07-14 15:45:18,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:18,143 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:18,143 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:18,143 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 5 times [2022-07-14 15:45:18,144 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:18,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [901829560] [2022-07-14 15:45:18,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:18,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:18,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:18,166 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:18,166 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:18,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [901829560] [2022-07-14 15:45:18,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [901829560] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:18,166 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:18,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:18,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [756767843] [2022-07-14 15:45:18,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:18,167 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:18,167 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:18,167 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:45:18,167 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:45:18,168 INFO L87 Difference]: Start difference. First operand 29409 states and 54088 transitions. cyclomatic complexity: 24680 Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:18,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:18,476 INFO L93 Difference]: Finished difference Result 29449 states and 54135 transitions. [2022-07-14 15:45:18,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:45:18,477 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29449 states and 54135 transitions. [2022-07-14 15:45:18,583 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:18,653 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29449 states to 29449 states and 54135 transitions. [2022-07-14 15:45:18,653 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29449 [2022-07-14 15:45:18,672 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29449 [2022-07-14 15:45:18,672 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29449 states and 54135 transitions. [2022-07-14 15:45:18,693 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:18,693 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29449 states and 54135 transitions. [2022-07-14 15:45:18,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29449 states and 54135 transitions. [2022-07-14 15:45:18,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29449 to 29409. [2022-07-14 15:45:18,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29409 states, 29409 states have (on average 1.83909687510626) internal successors, (54086), 29408 states have internal predecessors, (54086), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:18,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29409 states to 29409 states and 54086 transitions. [2022-07-14 15:45:18,955 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29409 states and 54086 transitions. [2022-07-14 15:45:18,955 INFO L374 stractBuchiCegarLoop]: Abstraction has 29409 states and 54086 transitions. [2022-07-14 15:45:18,955 INFO L287 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2022-07-14 15:45:18,955 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29409 states and 54086 transitions. [2022-07-14 15:45:19,029 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:19,029 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:19,029 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:19,032 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:19,032 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:19,032 INFO L752 eck$LassoCheckResult]: Stem: 1797321#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1797322#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1796628#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1796629#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1797141#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1797142#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1798000#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1798001#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1798297#L3272 assume !(0 == getOrigin_~person#1); 1798298#L3276 assume !(1 == getOrigin_~person#1); 1797274#L3280 assume !(2 == getOrigin_~person#1); 1797275#L3284 assume !(3 == getOrigin_~person#1); 1798256#L3288 assume !(4 == getOrigin_~person#1); 1798722#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1797437#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1797438#L414 assume !(0 == initPersonOnFloor_~floor#1); 1796414#L441 assume 1 == initPersonOnFloor_~floor#1; 1796415#L442 assume !(0 == initPersonOnFloor_~person#1); 1796976#L445 assume !(1 == initPersonOnFloor_~person#1); 1796977#L448 assume !(2 == initPersonOnFloor_~person#1); 1796626#L451 assume !(3 == initPersonOnFloor_~person#1); 1796627#L454 assume !(4 == initPersonOnFloor_~person#1); 1796664#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1796665#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1797389#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1797288#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1797289#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1797409#L206 assume !(0 == callOnFloor_~floorID#1); 1797411#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1796381#L218-2 assume { :end_inline_callOnFloor } true; 1796382#L558 assume { :end_inline_initPersonOnFloor } true; 1798410#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1797813#L3272-1 assume !(0 == getOrigin_~person#1); 1797435#L3276-1 assume !(1 == getOrigin_~person#1); 1797436#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1797581#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1797229#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1797230#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1798666#L468-1 assume 2 == initPersonOnFloor_~floor#1; 1798544#L469-2 assume !(0 == initPersonOnFloor_~person#1); 1797630#L472-2 assume !(1 == initPersonOnFloor_~person#1); 1797631#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1797657#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1798208#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1798308#L2629-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1798840#L2632-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1798838#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1798837#L206-2 assume !(0 == callOnFloor_~floorID#1); 1798836#L209-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1798832#L218-5 assume { :end_inline_callOnFloor } true; 1798831#L558-1 assume { :end_inline_initPersonOnFloor } true; 1798830#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1798829#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1798828#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1798827#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1797936#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1797937#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1797960#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1797962#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1798823#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1798086#L2239 assume !(1 == ~doorState~0); 1796563#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1796564#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1796893#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1796894#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1798391#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1797012#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1797014#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1798825#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1797015#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1796611#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1797451#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1798621#L1966-2 assume !(1 == ~currentHeading~0); 1798628#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1798557#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1798558#L1982-5 assume { :end_inline_continueInDirection } true; 1796879#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1801324#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1798715#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1798716#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1805758#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1805759#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1797938#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1796590#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1797661#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1797662#L3022-2 [2022-07-14 15:45:19,033 INFO L754 eck$LassoCheckResult]: Loop: 1797662#L3022-2 assume !false; 1806026#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1806025#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1806024#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1806023#L3030 assume 1 != cleanup_~tmp___0~9#1; 1806022#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1806021#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1806020#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1806018#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1806019#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1817991#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1817986#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1817981#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1817960#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1817954#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1817942#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1817940#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1817938#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1817934#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1817929#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1817926#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1817927#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1817933#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1817928#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1817925#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1817923#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1817922#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1802375#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1802374#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1802372#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1802373#L1759-2 assume !(0 == ~currentFloorID~0); 1802382#L1765-2 assume ~currentFloorID~0 > 0; 1802381#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1799098#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1799099#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1801464#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1801383#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1801378#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1801353#L1966-3 assume !(1 == ~currentHeading~0); 1801346#L1976-9 assume !(0 == ~currentFloorID~0); 1801336#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1801331#L1982-7 assume { :end_inline_continueInDirection } true; 1801332#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1805879#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1805878#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1805877#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1805876#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1801277#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1801273#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1799348#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1799349#L3022-2 assume !false; 1799344#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1799345#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1799340#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1799341#L3030 assume 1 != cleanup_~tmp___0~9#1; 1799336#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1799337#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1799332#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1799333#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1805866#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1799320#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1799321#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1799295#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1799296#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1799279#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1799280#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1799275#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1799276#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1799273#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1799272#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1799271#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1799270#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1799268#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1799267#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1799265#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1799264#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1798555#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1798556#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1798725#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1798744#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1804786#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1798365#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1798367#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1804781#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1798460#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1797547#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1798213#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1797988#L1966-5 assume !(1 == ~currentHeading~0); 1797990#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1797518#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1798788#L1982-11 assume { :end_inline_continueInDirection } true; 1797614#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1806046#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1806045#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1806044#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1806043#L2680-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1806041#L1395-6 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1806035#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1806028#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1806027#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1797662#L3022-2 [2022-07-14 15:45:19,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:19,033 INFO L85 PathProgramCache]: Analyzing trace with hash -903599737, now seen corresponding path program 1 times [2022-07-14 15:45:19,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:19,033 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1402731504] [2022-07-14 15:45:19,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:19,033 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:19,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:19,060 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:19,060 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:19,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1402731504] [2022-07-14 15:45:19,061 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1402731504] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:19,061 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:19,061 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:45:19,061 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057836131] [2022-07-14 15:45:19,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:19,061 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:19,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:19,062 INFO L85 PathProgramCache]: Analyzing trace with hash 1736365466, now seen corresponding path program 6 times [2022-07-14 15:45:19,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:19,062 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [439999277] [2022-07-14 15:45:19,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:19,062 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:19,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:19,087 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:19,087 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:19,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [439999277] [2022-07-14 15:45:19,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [439999277] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:19,088 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:19,088 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:19,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1501624346] [2022-07-14 15:45:19,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:19,088 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:19,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:19,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:45:19,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:45:19,089 INFO L87 Difference]: Start difference. First operand 29409 states and 54086 transitions. cyclomatic complexity: 24678 Second operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:19,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:19,239 INFO L93 Difference]: Finished difference Result 29426 states and 54103 transitions. [2022-07-14 15:45:19,240 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:45:19,240 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29426 states and 54103 transitions. [2022-07-14 15:45:19,347 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:19,421 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29426 states to 29426 states and 54103 transitions. [2022-07-14 15:45:19,422 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29426 [2022-07-14 15:45:19,443 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29426 [2022-07-14 15:45:19,443 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29426 states and 54103 transitions. [2022-07-14 15:45:19,462 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:19,462 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29426 states and 54103 transitions. [2022-07-14 15:45:19,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29426 states and 54103 transitions. [2022-07-14 15:45:19,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29426 to 29409. [2022-07-14 15:45:19,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29409 states, 29409 states have (on average 1.8390288687136591) internal successors, (54084), 29408 states have internal predecessors, (54084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:19,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29409 states to 29409 states and 54084 transitions. [2022-07-14 15:45:19,854 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29409 states and 54084 transitions. [2022-07-14 15:45:19,854 INFO L374 stractBuchiCegarLoop]: Abstraction has 29409 states and 54084 transitions. [2022-07-14 15:45:19,854 INFO L287 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2022-07-14 15:45:19,854 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29409 states and 54084 transitions. [2022-07-14 15:45:19,936 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26256 [2022-07-14 15:45:19,937 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:19,937 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:19,940 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:19,940 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:19,940 INFO L752 eck$LassoCheckResult]: Stem: 1856182#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1856183#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1855488#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1855489#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1856001#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1856002#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1856862#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1856863#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1857141#L3272 assume !(0 == getOrigin_~person#1); 1857142#L3276 assume !(1 == getOrigin_~person#1); 1856133#L3280 assume !(2 == getOrigin_~person#1); 1856134#L3284 assume !(3 == getOrigin_~person#1); 1857101#L3288 assume !(4 == getOrigin_~person#1); 1857561#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1856297#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1856298#L414 assume !(0 == initPersonOnFloor_~floor#1); 1855274#L441 assume 1 == initPersonOnFloor_~floor#1; 1855275#L442 assume !(0 == initPersonOnFloor_~person#1); 1855837#L445 assume !(1 == initPersonOnFloor_~person#1); 1855838#L448 assume !(2 == initPersonOnFloor_~person#1); 1855486#L451 assume !(3 == initPersonOnFloor_~person#1); 1855487#L454 assume !(4 == initPersonOnFloor_~person#1); 1855524#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1855525#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1856249#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1856149#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1856150#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1856269#L206 assume !(0 == callOnFloor_~floorID#1); 1856271#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1855241#L218-2 assume { :end_inline_callOnFloor } true; 1855242#L558 assume { :end_inline_initPersonOnFloor } true; 1857251#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1856671#L3272-1 assume !(0 == getOrigin_~person#1); 1856295#L3276-1 assume !(1 == getOrigin_~person#1); 1856296#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1856436#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1856088#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1856089#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1857512#L468-1 assume 2 == initPersonOnFloor_~floor#1; 1857388#L469-2 assume !(0 == initPersonOnFloor_~person#1); 1856487#L472-2 assume !(1 == initPersonOnFloor_~person#1); 1856488#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1856514#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1857060#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1857153#L2629-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1857679#L2632-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1857677#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1857676#L206-2 assume !(0 == callOnFloor_~floorID#1); 1857675#L209-2 assume !(1 == callOnFloor_~floorID#1); 1857672#L212-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1857671#L218-5 assume { :end_inline_callOnFloor } true; 1857670#L558-1 assume { :end_inline_initPersonOnFloor } true; 1857669#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1857668#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1857667#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1857666#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1856796#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1856797#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1856822#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1856824#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1857662#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1856943#L2239 assume !(1 == ~doorState~0); 1855423#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1855424#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1855755#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1855756#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1857230#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1855873#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1855875#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1857664#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1855876#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1855471#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1856311#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1857459#L1966-2 assume !(1 == ~currentHeading~0); 1857468#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1857401#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1857402#L1982-5 assume { :end_inline_continueInDirection } true; 1855741#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1855832#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1855833#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1855224#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1855225#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1857285#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1856798#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1855450#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1856424#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1856520#L3022-2 [2022-07-14 15:45:19,940 INFO L754 eck$LassoCheckResult]: Loop: 1856520#L3022-2 assume !false; 1864802#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1864801#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1864800#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1864796#L3030 assume 1 != cleanup_~tmp___0~9#1; 1864793#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1864790#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1864787#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1864762#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1864742#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1864737#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1864735#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1864727#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1864679#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1864639#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1864637#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1864634#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1864635#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1864669#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1864667#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1869511#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1869510#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1869509#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1869505#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1869503#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1869497#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1869495#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1860255#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1860254#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1860252#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1860253#L1759-2 assume !(0 == ~currentFloorID~0); 1861043#L1765-2 assume ~currentFloorID~0 > 0; 1857921#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1857922#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1857932#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1860075#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1860051#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1860044#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1860035#L1966-3 assume !(1 == ~currentHeading~0); 1860028#L1976-9 assume !(0 == ~currentFloorID~0); 1860018#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1860013#L1982-7 assume { :end_inline_continueInDirection } true; 1860014#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1864803#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1864797#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1864798#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1864799#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1858429#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1858420#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1858389#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1858386#L3022-2 assume !false; 1858385#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1858384#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1858383#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1858382#L3030 assume 1 != cleanup_~tmp___0~9#1; 1858381#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1858380#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1858377#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1858378#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1864744#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1858364#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1858365#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1858352#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1858353#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1858291#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1858292#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1858274#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1858275#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1858271#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1858270#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1858269#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1858268#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1858266#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1858265#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1858263#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1856189#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1856190#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1857400#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1857564#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1856330#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1858294#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1857201#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1857203#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1859199#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1857304#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1855688#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1864538#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1856851#L1966-5 assume !(1 == ~currentHeading~0); 1856853#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1855484#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1855485#L1982-11 assume { :end_inline_continueInDirection } true; 1856469#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1864821#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1864819#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864817#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864813#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864809#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864806#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1864805#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1864804#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1856520#L3022-2 [2022-07-14 15:45:19,941 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:19,941 INFO L85 PathProgramCache]: Analyzing trace with hash -48940633, now seen corresponding path program 1 times [2022-07-14 15:45:19,941 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:19,941 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1648266837] [2022-07-14 15:45:19,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:19,941 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:19,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:19,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:19,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:19,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1648266837] [2022-07-14 15:45:19,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1648266837] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:19,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:19,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-14 15:45:19,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1733071039] [2022-07-14 15:45:19,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:19,977 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:19,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:19,978 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 8 times [2022-07-14 15:45:19,978 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:19,978 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000287022] [2022-07-14 15:45:19,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:19,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:19,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:20,003 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:20,003 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:20,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000287022] [2022-07-14 15:45:20,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000287022] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:20,003 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:20,003 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:20,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [95216148] [2022-07-14 15:45:20,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:20,004 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:20,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:20,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:45:20,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:45:20,005 INFO L87 Difference]: Start difference. First operand 29409 states and 54084 transitions. cyclomatic complexity: 24676 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:20,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:45:20,114 INFO L93 Difference]: Finished difference Result 29645 states and 54442 transitions. [2022-07-14 15:45:20,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:45:20,114 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29645 states and 54442 transitions. [2022-07-14 15:45:20,236 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26492 [2022-07-14 15:45:20,315 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29645 states to 29645 states and 54442 transitions. [2022-07-14 15:45:20,315 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29645 [2022-07-14 15:45:20,336 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29645 [2022-07-14 15:45:20,337 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29645 states and 54442 transitions. [2022-07-14 15:45:20,356 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:45:20,356 INFO L369 hiAutomatonCegarLoop]: Abstraction has 29645 states and 54442 transitions. [2022-07-14 15:45:20,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29645 states and 54442 transitions. [2022-07-14 15:45:20,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29645 to 29600. [2022-07-14 15:45:20,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29600 states, 29600 states have (on average 1.8377027027027026) internal successors, (54396), 29599 states have internal predecessors, (54396), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:45:20,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29600 states to 29600 states and 54396 transitions. [2022-07-14 15:45:20,612 INFO L392 hiAutomatonCegarLoop]: Abstraction has 29600 states and 54396 transitions. [2022-07-14 15:45:20,612 INFO L374 stractBuchiCegarLoop]: Abstraction has 29600 states and 54396 transitions. [2022-07-14 15:45:20,612 INFO L287 stractBuchiCegarLoop]: ======== Iteration 30 ============ [2022-07-14 15:45:20,612 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29600 states and 54396 transitions. [2022-07-14 15:45:20,816 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26447 [2022-07-14 15:45:20,816 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:45:20,816 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:45:20,819 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:20,819 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:45:20,819 INFO L752 eck$LassoCheckResult]: Stem: 1915241#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1915242#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret124#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1914556#L1138 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1914557#L1131 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1915064#L1146 main_#t~ret124#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret124#1;havoc main_#t~ret124#1; 1915065#L3215 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1915905#L3190 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1915906#L2619 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret117#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1916193#L3272 assume !(0 == getOrigin_~person#1); 1916194#L3276 assume !(1 == getOrigin_~person#1); 1915194#L3280 assume !(2 == getOrigin_~person#1); 1915195#L3284 assume !(3 == getOrigin_~person#1); 1916150#L3288 assume !(4 == getOrigin_~person#1); 1916589#L3292 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1915355#L3297 bigMacCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret117#1;havoc bigMacCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1915356#L414 assume !(0 == initPersonOnFloor_~floor#1); 1914337#L441 assume 1 == initPersonOnFloor_~floor#1; 1914338#L442 assume !(0 == initPersonOnFloor_~person#1); 1914901#L445 assume !(1 == initPersonOnFloor_~person#1); 1914902#L448 assume !(2 == initPersonOnFloor_~person#1); 1914552#L451 assume !(3 == initPersonOnFloor_~person#1); 1914553#L454 assume !(4 == initPersonOnFloor_~person#1); 1914592#L457 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1914593#L522-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1915308#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1915208#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1915209#L2638-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1915327#L206 assume !(0 == callOnFloor_~floorID#1); 1915329#L209 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1914306#L218-2 assume { :end_inline_callOnFloor } true; 1914307#L558 assume { :end_inline_initPersonOnFloor } true; 1916302#L2995 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret114#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1; 1915717#L3272-1 assume !(0 == getOrigin_~person#1); 1915353#L3276-1 assume !(1 == getOrigin_~person#1); 1915354#L3280-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; 1915493#L3297-1 angelinaCall_#t~ret114#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret114#1;havoc angelinaCall_#t~ret114#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1915149#L414-1 assume !(0 == initPersonOnFloor_~floor#1); 1915150#L441-1 assume !(1 == initPersonOnFloor_~floor#1); 1916540#L468-1 assume 2 == initPersonOnFloor_~floor#1; 1916430#L469-2 assume !(0 == initPersonOnFloor_~person#1); 1915541#L472-2 assume !(1 == initPersonOnFloor_~person#1); 1915542#L475-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1915568#L522-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1916109#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1916206#L2629-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1916689#L2632-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1916687#L2638-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1916686#L206-2 assume !(0 == callOnFloor_~floorID#1); 1916685#L209-2 assume !(1 == callOnFloor_~floorID#1); 1916682#L212-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1916681#L218-5 assume { :end_inline_callOnFloor } true; 1916680#L558-1 assume { :end_inline_initPersonOnFloor } true; 1916679#L2962 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret118#1, cleanup_#t~ret119#1, cleanup_~i~3#1, cleanup_~tmp~22#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1916678#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1916677#L165 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1916676#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1915840#L1403 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1915841#L1424 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1915864#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1915866#L2011 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1916673#L2148 assume !(0 != timeShift_~tmp___9~2#1); 1915992#L2239 assume 1 == ~doorState~0;~doorState~0 := 0; 1914491#L2239-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1914492#L1590 assume !(1 == stopRequestedInDirection_~dir#1); 1914821#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1914822#L1912 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1916282#L2247 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1914936#L2021 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1914938#L2026 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1916674#L1590-1 assume !(1 == stopRequestedInDirection_~dir#1); 1914939#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1914539#L1912-1 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1915369#L2256 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1916499#L1966-2 assume !(1 == ~currentHeading~0); 1916504#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1916443#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1916444#L1982-5 assume { :end_inline_continueInDirection } true; 1914807#L2256-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1914897#L1386 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1914898#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1916583#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1918433#L2680 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1918431#L1395-1 __utac_acc__Specification1_spec__3_#t~ret101#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret101#1;havoc __utac_acc__Specification1_spec__3_#t~ret101#1; 1918425#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1918418#L2724 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1918416#L2271 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1918417#L3022-2 [2022-07-14 15:45:20,819 INFO L754 eck$LassoCheckResult]: Loop: 1918417#L3022-2 assume !false; 1920062#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1920061#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1920060#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1920059#L3030 assume 1 != cleanup_~tmp___0~9#1; 1920058#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1920057#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1920056#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1920054#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1920055#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1921162#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1921161#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1921157#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1921140#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1921135#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1921134#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1921133#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1921132#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1921130#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1921131#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1935591#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1935589#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1935588#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1935584#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1935583#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1935582#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1917845#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1917769#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1917765#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1917762#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1917759#L1759-2 assume !(0 == ~currentFloorID~0); 1917757#L1765-2 assume ~currentFloorID~0 > 0; 1917754#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1914571#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1914572#L165-32 stopRequestedInDirection_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1; 1917752#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1917753#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1930344#L2247-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1914367#L1966-3 assume !(1 == ~currentHeading~0); 1914368#L1976-9 assume !(0 == ~currentFloorID~0); 1918460#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1918457#L1982-7 assume { :end_inline_continueInDirection } true; 1918456#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1918455#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1918454#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1918453#L2665-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1918452#L1395-5 __utac_acc__Specification1_spec__3_#t~ret100#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret100#1;havoc __utac_acc__Specification1_spec__3_#t~ret100#1; 1918446#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1918436#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1918415#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1918411#L3022-2 assume !false; 1918407#L3023 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1918402#L3026 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1918395#L1233 cleanup_#t~ret118#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret118#1;havoc cleanup_#t~ret118#1; 1917685#L3030 assume 1 != cleanup_~tmp___0~9#1; 1917683#L3030-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~6#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~6#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~5#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~5#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1917682#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1917646#L165-21 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1917302#L1494 assume !(0 != anyStopRequested_~tmp___3~0#1); 1917303#L1498 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1918396#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1918391#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1918374#L165-22 anyStopRequested_#t~ret31#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret31#1;havoc anyStopRequested_#t~ret31#1; 1918049#L1505 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1918036#L1558 isIdle_#t~ret35#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~6#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~6#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1918030#L1571 cleanup_#t~ret119#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1918021#L3042 assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~11#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1918015#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1918016#L165-26 stopRequestedAtCurrentFloor_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret48#1;havoc stopRequestedAtCurrentFloor_#t~ret48#1; 1930339#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1930338#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1930337#L1424-1 stopRequestedAtCurrentFloor_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1930336#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1930335#L2011-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1930334#L2148-2 assume !(0 != timeShift_~tmp___9~2#1); 1930333#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1915249#L2239-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1916442#L1590-2 assume !(1 == stopRequestedInDirection_~dir#1); 1916594#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1914687#L1912-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1915854#L2247-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1915855#L2021-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1916257#L2026-2 timeShift_#t~ret70#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret70#1;havoc timeShift_#t~ret70#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~7#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~7#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1930463#L1590-3 assume !(1 == stopRequestedInDirection_~dir#1); 1916354#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1914756#L1912-3 timeShift_#t~ret71#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret71#1;havoc timeShift_#t~ret71#1; 1916114#L2256-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~8#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~8#1;~currentHeading~0 := continueInDirection_~dir#1; 1915894#L1966-5 assume !(1 == ~currentHeading~0); 1915896#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1914554#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1914555#L1982-11 assume { :end_inline_continueInDirection } true; 1915524#L2256-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret99#1, __utac_acc__Specification1_spec__3_#t~ret100#1, __utac_acc__Specification1_spec__3_#t~ret101#1, __utac_acc__Specification1_spec__3_#t~ret102#1, __utac_acc__Specification1_spec__3_#t~ret103#1, __utac_acc__Specification1_spec__3_#t~ret104#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~13#1, __utac_acc__Specification1_spec__3_~tmp___0~6#1, __utac_acc__Specification1_spec__3_~tmp___1~5#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~13#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1918592#L1386-1 __utac_acc__Specification1_spec__3_#t~ret99#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~13#1 := __utac_acc__Specification1_spec__3_#t~ret99#1;havoc __utac_acc__Specification1_spec__3_#t~ret99#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~13#1; 1918578#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1918579#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1920072#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1920068#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1920065#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1920064#L2724-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1920063#L2271-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1918417#L3022-2 [2022-07-14 15:45:20,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:20,820 INFO L85 PathProgramCache]: Analyzing trace with hash -189489243, now seen corresponding path program 1 times [2022-07-14 15:45:20,820 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:20,820 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [565812292] [2022-07-14 15:45:20,820 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:20,820 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:20,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:20,845 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:45:20,845 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:20,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [565812292] [2022-07-14 15:45:20,845 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [565812292] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:20,846 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:20,846 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:45:20,846 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [150442423] [2022-07-14 15:45:20,846 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:20,846 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:45:20,846 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:45:20,847 INFO L85 PathProgramCache]: Analyzing trace with hash -2068474532, now seen corresponding path program 9 times [2022-07-14 15:45:20,847 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:45:20,847 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [117556461] [2022-07-14 15:45:20,847 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:45:20,847 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:45:20,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:45:20,872 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 15:45:20,873 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:45:20,873 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [117556461] [2022-07-14 15:45:20,873 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [117556461] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:45:20,873 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:45:20,873 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:45:20,873 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1733064245] [2022-07-14 15:45:20,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:45:20,874 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:45:20,874 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:45:20,874 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:45:20,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:45:20,874 INFO L87 Difference]: Start difference. First operand 29600 states and 54396 transitions. cyclomatic complexity: 24797 Second operand has 4 states, 4 states have (on average 21.5) internal successors, (86), 3 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)