./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 7e70badd Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8e809cb7921b0f8738511433928ba20d09f78a0d0fe23412d97e6052fa9e13ec --- Real Ultimate output --- This is Ultimate 0.2.1-dev-7e70bad [2021-11-23 14:06:32,863 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 14:06:32,866 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 14:06:32,920 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 14:06:32,920 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 14:06:32,925 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 14:06:32,927 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 14:06:32,932 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 14:06:32,935 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 14:06:32,941 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 14:06:32,942 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 14:06:32,944 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 14:06:32,944 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 14:06:32,947 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 14:06:32,949 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 14:06:32,957 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 14:06:32,959 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 14:06:32,960 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 14:06:32,963 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 14:06:32,971 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 14:06:32,973 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 14:06:32,974 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 14:06:32,978 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 14:06:32,979 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 14:06:32,988 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 14:06:32,988 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 14:06:32,989 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 14:06:32,991 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 14:06:32,992 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 14:06:32,993 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 14:06:32,994 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 14:06:32,995 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 14:06:32,997 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 14:06:32,998 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 14:06:32,999 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 14:06:33,000 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 14:06:33,000 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 14:06:33,001 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 14:06:33,001 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 14:06:33,002 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 14:06:33,003 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 14:06:33,004 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-11-23 14:06:33,045 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 14:06:33,045 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 14:06:33,046 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 14:06:33,046 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 14:06:33,048 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-23 14:06:33,049 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-23 14:06:33,049 INFO L138 SettingsManager]: * Use SBE=true [2021-11-23 14:06:33,049 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-11-23 14:06:33,050 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-11-23 14:06:33,050 INFO L138 SettingsManager]: * Use old map elimination=false [2021-11-23 14:06:33,051 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-11-23 14:06:33,051 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-11-23 14:06:33,052 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-11-23 14:06:33,052 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 14:06:33,052 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 14:06:33,053 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-11-23 14:06:33,053 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 14:06:33,053 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 14:06:33,053 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 14:06:33,054 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-11-23 14:06:33,054 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-11-23 14:06:33,054 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-11-23 14:06:33,055 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 14:06:33,055 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 14:06:33,055 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-11-23 14:06:33,055 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 14:06:33,057 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-11-23 14:06:33,057 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 14:06:33,058 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-23 14:06:33,058 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 14:06:33,058 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-23 14:06:33,059 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 14:06:33,060 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-11-23 14:06:33,060 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8e809cb7921b0f8738511433928ba20d09f78a0d0fe23412d97e6052fa9e13ec [2021-11-23 14:06:33,352 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 14:06:33,376 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 14:06:33,379 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 14:06:33,380 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 14:06:33,381 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 14:06:33,382 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c [2021-11-23 14:06:33,453 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/data/127ddb670/458b5db8b2d14a0cb8a0e646b7de61e7/FLAG78f138f9d [2021-11-23 14:06:34,061 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 14:06:34,062 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c [2021-11-23 14:06:34,095 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/data/127ddb670/458b5db8b2d14a0cb8a0e646b7de61e7/FLAG78f138f9d [2021-11-23 14:06:34,291 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/data/127ddb670/458b5db8b2d14a0cb8a0e646b7de61e7 [2021-11-23 14:06:34,293 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 14:06:34,295 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 14:06:34,297 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 14:06:34,297 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 14:06:34,300 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 14:06:34,300 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:06:34" (1/1) ... [2021-11-23 14:06:34,301 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3df315e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:34, skipping insertion in model container [2021-11-23 14:06:34,301 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:06:34" (1/1) ... [2021-11-23 14:06:34,309 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 14:06:34,390 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 14:06:34,607 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c[1545,1558] [2021-11-23 14:06:35,147 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 14:06:35,170 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 14:06:35,195 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c[1545,1558] [2021-11-23 14:06:35,331 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 14:06:35,402 INFO L208 MainTranslator]: Completed translation [2021-11-23 14:06:35,407 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35 WrapperNode [2021-11-23 14:06:35,407 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 14:06:35,409 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 14:06:35,409 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 14:06:35,410 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 14:06:35,419 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:35,483 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:35,779 INFO L137 Inliner]: procedures = 93, calls = 338, calls flagged for inlining = 191, calls inlined = 282, statements flattened = 8634 [2021-11-23 14:06:35,780 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 14:06:35,781 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 14:06:35,781 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 14:06:35,781 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 14:06:35,792 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:35,793 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:35,833 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:35,833 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:35,948 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:36,035 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:36,051 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:36,081 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 14:06:36,082 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 14:06:36,082 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 14:06:36,082 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 14:06:36,083 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (1/1) ... [2021-11-23 14:06:36,092 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:36,104 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:36,122 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:36,139 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-11-23 14:06:36,181 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 14:06:36,181 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 14:06:36,181 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 14:06:36,182 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 14:06:36,434 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 14:06:36,437 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 14:06:40,563 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 14:06:40,610 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 14:06:40,611 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-11-23 14:06:40,616 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:06:40 BoogieIcfgContainer [2021-11-23 14:06:40,616 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 14:06:40,617 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-11-23 14:06:40,618 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-11-23 14:06:40,621 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-11-23 14:06:40,622 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-23 14:06:40,622 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 23.11 02:06:34" (1/3) ... [2021-11-23 14:06:40,624 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5d7d8a86 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 23.11 02:06:40, skipping insertion in model container [2021-11-23 14:06:40,624 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-23 14:06:40,624 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:06:35" (2/3) ... [2021-11-23 14:06:40,625 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5d7d8a86 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 23.11 02:06:40, skipping insertion in model container [2021-11-23 14:06:40,625 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-23 14:06:40,625 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:06:40" (3/3) ... [2021-11-23 14:06:40,626 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product11.cil.c [2021-11-23 14:06:40,686 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-11-23 14:06:40,686 INFO L360 BuchiCegarLoop]: Hoare is false [2021-11-23 14:06:40,687 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-11-23 14:06:40,687 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-11-23 14:06:40,687 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-11-23 14:06:40,687 INFO L364 BuchiCegarLoop]: Difference is false [2021-11-23 14:06:40,687 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-11-23 14:06:40,687 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-11-23 14:06:40,773 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:06:40,900 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2021-11-23 14:06:40,901 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:06:40,901 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:06:40,920 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:40,920 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:40,921 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-11-23 14:06:40,929 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:06:40,974 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2021-11-23 14:06:40,975 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:06:40,975 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:06:40,981 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:40,981 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:40,990 INFO L791 eck$LassoCheckResult]: Stem: 646#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2393#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1781#L3410true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1672#L3403true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 826#L3418true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 633#L408true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 499#L377true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1570#L2548true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1086#L467true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1884#L492true bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1414#L3068true assume 0 == initPersonOnFloor_~floor#1; 91#L3069true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1349#L3176-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 683#L2860true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2286#L2872-2true assume { :end_inline_callOnFloor } true; 1888#L3212true assume { :end_inline_initPersonOnFloor } true; 857#L177true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1294#L2797true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1229#L2824true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 531#L2429true stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 186#L1813true assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1693#L1144true stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 2439#L1817true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2236#L1830true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2058#L1966true assume !(0 != timeShift_~tmp___9~2#1); 1896#L2057true assume 1 == ~doorState~0;~doorState~0 := 0; 667#L2057-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 22#L2797-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 142#L2824-3true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2279#L2429-1true stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2224#L1696true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1571#L1144-1true stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1357#L1709true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1415#L2065true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 192#L1753true assume !(1 == ~currentHeading~0); 1237#L1763true assume !(0 == ~currentFloorID~0); 1852#L1763-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1651#L1769-1true assume { :end_inline_continueInDirection } true; 442#L2074-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1587#L1144-3true __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 549#L2593true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1688#L2594true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 66#L1153true __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1304#L2598true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 755#L2653true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1116#L2089true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1990#L207-2true [2021-11-23 14:06:40,992 INFO L793 eck$LassoCheckResult]: Loop: 1990#L207-2true assume !false; 922#L208true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 285#L211true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1996#L990true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1089#L215true assume 1 != cleanup_~tmp___0~0#1; 2044#L215-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 979#L2797-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2073#L2824-25true anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2345#L1252true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1087#L1316true isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2107#L1329true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1363#L227true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 272#L2797-30true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 299#L2824-30true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2266#L2429-3true stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 161#L1813-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2219#L1144-4true stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1755#L1817-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2473#L1830-1true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2210#L1966-2true assume !(0 != timeShift_~tmp___9~2#1); 835#L2057-3true assume 1 == ~doorState~0;~doorState~0 := 0; 965#L2057-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1597#L2797-33true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1722#L2824-33true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1463#L2429-4true stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2198#L1696-2true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 52#L1144-5true stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2078#L1709-2true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1365#L2065-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 413#L1753-3true assume !(1 == ~currentHeading~0); 472#L1763-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1095#L1763-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2478#L1769-7true assume { :end_inline_continueInDirection } true; 2217#L2074-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 173#L1144-7true __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 212#L2593-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1933#L2594-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 2103#L1153-5true __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1069#L2598-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 146#L2653-1true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1238#L2089-1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1990#L207-2true [2021-11-23 14:06:41,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:41,000 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 1 times [2021-11-23 14:06:41,011 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:06:41,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [711753453] [2021-11-23 14:06:41,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:06:41,013 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:06:41,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:41,386 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:06:41,387 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:06:41,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [711753453] [2021-11-23 14:06:41,388 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [711753453] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:06:41,388 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:06:41,388 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 14:06:41,390 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1865742838] [2021-11-23 14:06:41,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:06:41,402 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:06:41,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:41,403 INFO L85 PathProgramCache]: Analyzing trace with hash -1878229724, now seen corresponding path program 1 times [2021-11-23 14:06:41,404 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:06:41,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336274876] [2021-11-23 14:06:41,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:06:41,404 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:06:41,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:41,566 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:06:41,566 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:06:41,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336274876] [2021-11-23 14:06:41,567 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336274876] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:06:41,567 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:06:41,568 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 14:06:41,579 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1362869671] [2021-11-23 14:06:41,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:06:41,581 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:06:41,582 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:06:41,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-23 14:06:41,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-23 14:06:41,632 INFO L87 Difference]: Start difference. First operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:06:46,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:06:46,565 INFO L93 Difference]: Finished difference Result 18772 states and 34781 transitions. [2021-11-23 14:06:46,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-23 14:06:46,575 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18772 states and 34781 transitions. [2021-11-23 14:06:46,807 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 8992 [2021-11-23 14:06:47,049 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18772 states to 18592 states and 34585 transitions. [2021-11-23 14:06:47,051 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18592 [2021-11-23 14:06:47,081 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18592 [2021-11-23 14:06:47,082 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18592 states and 34585 transitions. [2021-11-23 14:06:47,128 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-23 14:06:47,128 INFO L681 BuchiCegarLoop]: Abstraction has 18592 states and 34585 transitions. [2021-11-23 14:06:47,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18592 states and 34585 transitions. [2021-11-23 14:06:47,521 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18592 to 7054. [2021-11-23 14:06:47,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7054 states, 7054 states have (on average 1.8622058406577828) internal successors, (13136), 7053 states have internal predecessors, (13136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:06:47,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7054 states to 7054 states and 13136 transitions. [2021-11-23 14:06:47,574 INFO L704 BuchiCegarLoop]: Abstraction has 7054 states and 13136 transitions. [2021-11-23 14:06:47,574 INFO L587 BuchiCegarLoop]: Abstraction has 7054 states and 13136 transitions. [2021-11-23 14:06:47,575 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-11-23 14:06:47,575 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7054 states and 13136 transitions. [2021-11-23 14:06:47,611 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3578 [2021-11-23 14:06:47,611 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:06:47,611 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:06:47,615 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:47,615 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:47,615 INFO L791 eck$LassoCheckResult]: Stem: 22555#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 22556#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 23657#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 23598#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 22825#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 22537#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 22308#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 22309#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 23144#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 22441#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23416#L3068 assume 0 == initPersonOnFloor_~floor#1; 21517#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 21304#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 22615#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22299#L2872-2 assume { :end_inline_callOnFloor } true; 23707#L3212 assume { :end_inline_initPersonOnFloor } true; 22868#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 22869#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23275#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 22359#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 21724#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 21726#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 23609#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 23881#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 27231#L1966 assume !(0 != timeShift_~tmp___9~2#1); 27232#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 28190#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 28189#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 28188#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 28187#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 28185#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 28186#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 28194#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 28192#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 28191#L1753 assume !(1 == ~currentHeading~0); 23283#L1763 assume !(0 == ~currentFloorID~0); 23284#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23580#L1769-1 assume { :end_inline_continueInDirection } true; 22216#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 22217#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 22392#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 22393#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 21459#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 21460#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 21379#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 22723#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 26489#L207-2 [2021-11-23 14:06:47,616 INFO L793 eck$LassoCheckResult]: Loop: 26489#L207-2 assume !false; 26488#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 26487#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 26486#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 23147#L215 assume 1 != cleanup_~tmp___0~0#1; 23148#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 23021#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23022#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 26463#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 26456#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 26455#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 24028#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 24027#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23954#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 24004#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 23952#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 23951#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 23950#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 23641#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 23841#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 23842#L2057-3 assume 1 == ~doorState~0;~doorState~0 := 0; 28229#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 28228#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 28227#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 28226#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 28225#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 21423#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 21424#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 23379#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 23380#L1753-3 assume !(1 == ~currentHeading~0); 22265#L1763-9 assume !(0 == ~currentFloorID~0); 21412#L1763-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 23152#L1769-7 assume { :end_inline_continueInDirection } true; 22267#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 27349#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 27348#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 27347#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 27344#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 27338#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 27328#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 26490#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 26489#L207-2 [2021-11-23 14:06:47,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:47,617 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 2 times [2021-11-23 14:06:47,617 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:06:47,618 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710244474] [2021-11-23 14:06:47,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:06:47,618 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:06:47,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:47,688 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:06:47,688 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:06:47,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710244474] [2021-11-23 14:06:47,689 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710244474] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:06:47,689 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:06:47,689 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 14:06:47,690 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [243717888] [2021-11-23 14:06:47,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:06:47,690 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:06:47,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:47,691 INFO L85 PathProgramCache]: Analyzing trace with hash -1177165146, now seen corresponding path program 1 times [2021-11-23 14:06:47,691 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:06:47,692 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1678521895] [2021-11-23 14:06:47,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:06:47,692 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:06:47,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:47,730 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:06:47,730 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:06:47,730 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1678521895] [2021-11-23 14:06:47,731 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1678521895] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:06:47,731 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:06:47,731 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 14:06:47,731 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [947842688] [2021-11-23 14:06:47,731 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:06:47,732 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:06:47,732 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:06:47,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 14:06:47,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 14:06:47,733 INFO L87 Difference]: Start difference. First operand 7054 states and 13136 transitions. cyclomatic complexity: 6084 Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:06:47,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:06:47,914 INFO L93 Difference]: Finished difference Result 10664 states and 19818 transitions. [2021-11-23 14:06:47,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 14:06:47,916 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10664 states and 19818 transitions. [2021-11-23 14:06:47,991 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7128 [2021-11-23 14:06:48,196 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10664 states to 10664 states and 19818 transitions. [2021-11-23 14:06:48,199 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10664 [2021-11-23 14:06:48,216 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10664 [2021-11-23 14:06:48,217 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10664 states and 19818 transitions. [2021-11-23 14:06:48,238 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-23 14:06:48,239 INFO L681 BuchiCegarLoop]: Abstraction has 10664 states and 19818 transitions. [2021-11-23 14:06:48,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10664 states and 19818 transitions. [2021-11-23 14:06:48,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10664 to 10656. [2021-11-23 14:06:48,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10656 states, 10656 states have (on average 1.8586711711711712) internal successors, (19806), 10655 states have internal predecessors, (19806), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:06:48,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10656 states to 10656 states and 19806 transitions. [2021-11-23 14:06:48,509 INFO L704 BuchiCegarLoop]: Abstraction has 10656 states and 19806 transitions. [2021-11-23 14:06:48,509 INFO L587 BuchiCegarLoop]: Abstraction has 10656 states and 19806 transitions. [2021-11-23 14:06:48,509 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-11-23 14:06:48,509 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10656 states and 19806 transitions. [2021-11-23 14:06:48,552 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7120 [2021-11-23 14:06:48,552 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:06:48,552 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:06:48,556 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:48,557 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:48,557 INFO L791 eck$LassoCheckResult]: Stem: 40282#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 40283#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 41400#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 41343#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 40552#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 40264#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 40035#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 40036#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 40876#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 40168#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 41159#L3068 assume 0 == initPersonOnFloor_~floor#1; 39242#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39032#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 40343#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 40028#L2872-2 assume { :end_inline_callOnFloor } true; 41454#L3212 assume { :end_inline_initPersonOnFloor } true; 40597#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 40598#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 41063#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 40085#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 39452#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 39454#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 41354#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 41605#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 41532#L1966 assume !(0 != timeShift_~tmp___9~2#1); 41457#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 40317#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 39071#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 39072#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 39357#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 41598#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 41272#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 39539#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 41115#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 39466#L1753 assume !(1 == ~currentHeading~0); 39467#L1763 assume !(0 == ~currentFloorID~0); 41015#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41442#L1769-1 assume { :end_inline_continueInDirection } true; 45312#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45310#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 45307#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 45306#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 45292#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 45271#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 45267#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 45265#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 45264#L207-2 [2021-11-23 14:06:48,558 INFO L793 eck$LassoCheckResult]: Loop: 45264#L207-2 assume !false; 45263#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 45262#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 45261#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 45260#L215 assume 1 != cleanup_~tmp___0~0#1; 45259#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 45249#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 45239#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 45231#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 45222#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 45221#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 45220#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 45219#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 42320#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45218#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 45217#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45215#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 45213#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39301#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 41592#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 40568#L2057-3 assume 1 == ~doorState~0;~doorState~0 := 0; 40569#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 40731#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 41292#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 41202#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 41203#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 39148#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 39149#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 41121#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 39895#L1753-3 assume !(1 == ~currentHeading~0); 39896#L1763-9 assume !(0 == ~currentFloorID~0); 39133#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 40883#L1769-7 assume { :end_inline_continueInDirection } true; 45311#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45309#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 45308#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 45305#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 45301#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 45289#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 45268#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 45266#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 45264#L207-2 [2021-11-23 14:06:48,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:48,559 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 3 times [2021-11-23 14:06:48,560 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:06:48,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1928245694] [2021-11-23 14:06:48,560 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:06:48,560 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:06:48,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:48,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:06:48,614 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:06:48,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1928245694] [2021-11-23 14:06:48,615 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1928245694] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:06:48,615 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:06:48,615 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 14:06:48,615 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37227815] [2021-11-23 14:06:48,616 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:06:48,616 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:06:48,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:48,617 INFO L85 PathProgramCache]: Analyzing trace with hash -1570192156, now seen corresponding path program 1 times [2021-11-23 14:06:48,617 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:06:48,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739121736] [2021-11-23 14:06:48,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:06:48,618 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:06:48,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:48,700 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:06:48,700 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:06:48,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739121736] [2021-11-23 14:06:48,701 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739121736] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:06:48,701 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:06:48,702 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-23 14:06:48,702 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1880668980] [2021-11-23 14:06:48,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:06:48,702 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:06:48,703 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:06:48,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 14:06:48,704 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 14:06:48,704 INFO L87 Difference]: Start difference. First operand 10656 states and 19806 transitions. cyclomatic complexity: 9152 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:06:49,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:06:49,463 INFO L93 Difference]: Finished difference Result 38585 states and 71368 transitions. [2021-11-23 14:06:49,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-23 14:06:49,464 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38585 states and 71368 transitions. [2021-11-23 14:06:49,835 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 33918 [2021-11-23 14:06:50,012 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38585 states to 38585 states and 71368 transitions. [2021-11-23 14:06:50,013 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38585 [2021-11-23 14:06:50,067 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38585 [2021-11-23 14:06:50,067 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38585 states and 71368 transitions. [2021-11-23 14:06:50,101 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-23 14:06:50,101 INFO L681 BuchiCegarLoop]: Abstraction has 38585 states and 71368 transitions. [2021-11-23 14:06:50,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38585 states and 71368 transitions. [2021-11-23 14:06:50,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38585 to 13661. [2021-11-23 14:06:50,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13661 states, 13661 states have (on average 1.8443744967425517) internal successors, (25196), 13660 states have internal predecessors, (25196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:06:51,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13661 states to 13661 states and 25196 transitions. [2021-11-23 14:06:51,088 INFO L704 BuchiCegarLoop]: Abstraction has 13661 states and 25196 transitions. [2021-11-23 14:06:51,088 INFO L587 BuchiCegarLoop]: Abstraction has 13661 states and 25196 transitions. [2021-11-23 14:06:51,089 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-11-23 14:06:51,089 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13661 states and 25196 transitions. [2021-11-23 14:06:51,179 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9188 [2021-11-23 14:06:51,192 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:06:51,192 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:06:51,196 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:51,196 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:06:51,197 INFO L791 eck$LassoCheckResult]: Stem: 89551#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 89552#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 90762#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 90693#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 89829#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 89532#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 89301#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 89302#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 90171#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 89437#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 90482#L3068 assume 0 == initPersonOnFloor_~floor#1; 88502#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 88292#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 89612#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 89294#L2872-2 assume { :end_inline_callOnFloor } true; 90827#L3212 assume { :end_inline_initPersonOnFloor } true; 89874#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 89875#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 90372#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 89352#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 88714#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 88716#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 90708#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 91054#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 90923#L1966 assume !(0 != timeShift_~tmp___9~2#1); 90924#L2057 assume !(1 == ~doorState~0); 91304#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 98401#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 98400#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 98395#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 90993#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 90994#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 90429#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 90430#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 91537#L1753 assume !(1 == ~currentHeading~0); 91538#L1763 assume !(0 == ~currentFloorID~0); 90809#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 90810#L1769-1 assume { :end_inline_continueInDirection } true; 98387#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 98383#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 98384#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 98380#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 98381#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 98375#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 98376#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 99486#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 99485#L207-2 [2021-11-23 14:06:51,197 INFO L793 eck$LassoCheckResult]: Loop: 99485#L207-2 assume !false; 99484#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 99483#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 99482#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 99477#L215 assume 1 != cleanup_~tmp___0~0#1; 99472#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99471#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 99460#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 99452#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 99443#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 99442#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 99437#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99435#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 93802#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 99434#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 99433#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 99432#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 99431#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 90743#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 99765#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 99763#L2057-3 assume !(1 == ~doorState~0); 99762#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99761#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 99755#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 99689#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 99652#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 99651#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 99650#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 99648#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 99649#L1753-3 assume !(1 == ~currentHeading~0); 89260#L1763-9 assume !(0 == ~currentFloorID~0); 88393#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 90178#L1769-7 assume { :end_inline_continueInDirection } true; 99040#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 98681#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 98682#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 98676#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 98677#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 98671#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 98673#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 99487#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 99485#L207-2 [2021-11-23 14:06:51,198 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:51,199 INFO L85 PathProgramCache]: Analyzing trace with hash -1813124867, now seen corresponding path program 1 times [2021-11-23 14:06:51,199 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:06:51,199 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1070977669] [2021-11-23 14:06:51,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:06:51,200 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:06:51,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:51,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:06:51,273 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:06:51,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1070977669] [2021-11-23 14:06:51,273 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1070977669] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:06:51,274 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:06:51,274 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 14:06:51,288 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [426987958] [2021-11-23 14:06:51,289 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:06:51,289 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:06:51,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:51,290 INFO L85 PathProgramCache]: Analyzing trace with hash -1147490330, now seen corresponding path program 1 times [2021-11-23 14:06:51,291 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:06:51,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97882105] [2021-11-23 14:06:51,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:06:51,297 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:06:51,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-23 14:06:51,339 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-23 14:06:51,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-23 14:06:51,468 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-23 14:06:53,100 INFO L210 LassoAnalysis]: Preferences: [2021-11-23 14:06:53,101 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-11-23 14:06:53,101 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-11-23 14:06:53,101 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-11-23 14:06:53,101 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-11-23 14:06:53,102 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:53,102 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-11-23 14:06:53,102 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-11-23 14:06:53,102 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec2_product11.cil.c_Iteration4_Loop [2021-11-23 14:06:53,102 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-11-23 14:06:53,103 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-11-23 14:06:53,128 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,133 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,145 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,146 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,148 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,150 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,154 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,158 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,206 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,212 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,214 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,217 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,242 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,243 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,246 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,250 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,251 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,259 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,273 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,278 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,279 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,363 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,365 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:53,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:54,028 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-11-23 14:06:54,029 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-11-23 14:06:54,031 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,041 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,042 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-11-23 14:06:54,043 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,043 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,058 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,058 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret118#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret118#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,100 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,100 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,100 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,101 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,106 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,106 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,107 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-11-23 14:06:54,116 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,116 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret47#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret47#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,141 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-11-23 14:06:54,142 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,142 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,143 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,144 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-11-23 14:06:54,145 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,172 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,191 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,191 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret61#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret61#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,231 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,231 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,231 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,233 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,244 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-11-23 14:06:54,244 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,245 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,266 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,266 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret45#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret45#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,302 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2021-11-23 14:06:54,302 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,302 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,303 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,305 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-11-23 14:06:54,305 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,305 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,321 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,321 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0, ULTIMATE.start_cleanup_~tmp___0~0#1=0, ULTIMATE.start_isBlocked_#res#1=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0, ULTIMATE.start_cleanup_~tmp___0~0#1=0, ULTIMATE.start_isBlocked_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,344 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,344 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,344 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,345 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,346 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-11-23 14:06:54,350 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,350 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,358 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,358 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret46#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret46#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,394 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,394 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,395 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,395 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,401 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,401 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,410 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-11-23 14:06:54,411 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,411 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret125#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret125#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,433 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2021-11-23 14:06:54,434 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,434 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,435 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,436 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-11-23 14:06:54,436 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,437 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,447 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,447 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~17#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~17#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,466 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2021-11-23 14:06:54,466 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,467 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,467 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,468 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-11-23 14:06:54,470 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,470 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,479 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,479 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret65#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret65#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,513 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,513 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,513 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,528 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,541 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,541 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,551 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-11-23 14:06:54,564 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,564 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___1~8#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___1~8#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,589 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,590 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,590 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,591 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,592 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-11-23 14:06:54,592 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,592 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,600 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,600 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret88#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret88#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,623 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,623 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,623 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,624 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,625 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-11-23 14:06:54,626 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,626 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,634 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,634 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret87#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret87#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,655 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2021-11-23 14:06:54,655 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,655 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,656 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,659 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,659 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,670 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2021-11-23 14:06:54,672 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,672 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~13#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~13#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,691 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,692 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,692 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,696 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,700 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2021-11-23 14:06:54,701 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,701 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,709 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,709 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret127#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret127#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,731 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,731 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,732 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,732 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,733 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2021-11-23 14:06:54,734 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,734 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,743 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,743 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret126#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret126#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,768 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,768 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,768 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,769 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,770 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2021-11-23 14:06:54,773 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,773 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,795 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,796 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,815 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2021-11-23 14:06:54,815 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,815 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,816 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,816 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2021-11-23 14:06:54,817 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,817 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,841 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,841 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Honda state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,863 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,863 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,863 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,864 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,865 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2021-11-23 14:06:54,868 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,868 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,884 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,884 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_areDoorsOpen_#res#1=4, ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___4~3#1=4, ~doorState~0=4, ULTIMATE.start_areDoorsOpen_~retValue_acc~10#1=4} Honda state: {ULTIMATE.start_areDoorsOpen_#res#1=4, ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___4~3#1=4, ~doorState~0=4, ULTIMATE.start_areDoorsOpen_~retValue_acc~10#1=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,909 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,909 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,910 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,910 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,912 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2021-11-23 14:06:54,913 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,913 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,920 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,921 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,940 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,942 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,942 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,943 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,944 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2021-11-23 14:06:54,945 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,945 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,953 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,953 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___2~6#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___2~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:54,974 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:54,974 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:54,974 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:54,975 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:54,976 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2021-11-23 14:06:54,977 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:54,977 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:54,987 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-11-23 14:06:54,987 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret67#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret67#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-11-23 14:06:55,009 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2021-11-23 14:06:55,009 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:55,009 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:55,010 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:55,011 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2021-11-23 14:06:55,012 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-23 14:06:55,012 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:55,075 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:55,076 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:55,076 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:55,088 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:55,093 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-11-23 14:06:55,093 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-23 14:06:55,116 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2021-11-23 14:06:56,548 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-11-23 14:06:56,552 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:56,552 INFO L210 LassoAnalysis]: Preferences: [2021-11-23 14:06:56,552 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-11-23 14:06:56,552 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-11-23 14:06:56,552 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-11-23 14:06:56,552 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-11-23 14:06:56,552 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:56,552 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-11-23 14:06:56,553 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-11-23 14:06:56,553 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec2_product11.cil.c_Iteration4_Loop [2021-11-23 14:06:56,553 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-11-23 14:06:56,553 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-11-23 14:06:56,559 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,572 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,574 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,575 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,587 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,589 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,590 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,592 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,594 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,598 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,600 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,602 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,603 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,607 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,616 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,628 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,636 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,639 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,641 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,643 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,645 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,651 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,653 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,655 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,657 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,663 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,665 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,669 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,671 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,677 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,679 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,681 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,682 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,684 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,686 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,690 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,691 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,693 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,696 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,698 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,718 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,735 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,737 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,775 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:56,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-23 14:06:57,535 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-11-23 14:06:57,540 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-11-23 14:06:57,542 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:57,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:57,553 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:57,555 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:57,567 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:57,567 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:57,567 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:57,568 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:57,568 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:57,570 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:57,570 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:57,576 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2021-11-23 14:06:57,580 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:57,624 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:57,624 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:57,625 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:57,626 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:57,650 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2021-11-23 14:06:57,651 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:57,662 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:57,662 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:57,662 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:57,662 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:57,662 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:57,663 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:57,663 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:57,673 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:57,712 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:57,713 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:57,713 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:57,714 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:57,721 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:57,731 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:57,731 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:57,731 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:57,731 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:57,731 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:57,732 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:57,732 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:57,733 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2021-11-23 14:06:57,744 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:57,783 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:57,783 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:57,783 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:57,785 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:57,789 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:57,801 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:57,801 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:57,801 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:57,801 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2021-11-23 14:06:57,801 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:57,819 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2021-11-23 14:06:57,820 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:57,826 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2021-11-23 14:06:57,840 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:57,878 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:57,878 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:57,879 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:57,880 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:57,884 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:57,895 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:57,896 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:57,896 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:57,896 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:57,896 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:57,897 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:57,897 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:57,899 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2021-11-23 14:06:57,912 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:57,955 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:57,955 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:57,955 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:57,956 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:57,969 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:57,978 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:57,979 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:57,979 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:57,979 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:57,979 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:57,980 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:57,980 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:57,981 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2021-11-23 14:06:57,992 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,033 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:58,034 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,034 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,036 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,039 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,049 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,050 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,050 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,050 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:58,050 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,051 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2021-11-23 14:06:58,051 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:58,051 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,061 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,105 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:58,105 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,105 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,106 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,109 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,119 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,120 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,120 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,120 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:58,120 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,121 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:58,121 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,122 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2021-11-23 14:06:58,132 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,168 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2021-11-23 14:06:58,168 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,168 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,169 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,175 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2021-11-23 14:06:58,175 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,184 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,184 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,184 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,184 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:58,184 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,185 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:58,185 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,187 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,209 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2021-11-23 14:06:58,210 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,210 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,211 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,212 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2021-11-23 14:06:58,213 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,221 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,221 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,221 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,222 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:58,222 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,222 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:58,222 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,223 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,247 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:58,247 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,247 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,251 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,252 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2021-11-23 14:06:58,253 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,262 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,262 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,262 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,262 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:58,262 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,263 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:58,263 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,264 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,286 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:58,286 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,286 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,287 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,288 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2021-11-23 14:06:58,289 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,297 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,297 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,297 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,297 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:58,298 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,298 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:58,298 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,299 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,320 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Ended with exit code 0 [2021-11-23 14:06:58,320 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,321 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,322 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,323 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2021-11-23 14:06:58,324 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,332 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,332 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,332 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,332 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:58,333 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,334 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:58,334 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,335 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,356 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:58,356 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,356 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,357 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,357 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2021-11-23 14:06:58,358 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,365 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,365 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,366 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,366 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2021-11-23 14:06:58,366 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,370 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2021-11-23 14:06:58,370 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,375 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-11-23 14:06:58,399 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:58,400 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,400 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,401 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,402 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2021-11-23 14:06:58,403 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-23 14:06:58,412 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-23 14:06:58,412 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-23 14:06:58,412 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-23 14:06:58,412 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-23 14:06:58,412 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-23 14:06:58,416 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-23 14:06:58,416 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-23 14:06:58,427 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-11-23 14:06:58,434 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2021-11-23 14:06:58,434 INFO L444 ModelExtractionUtils]: 7 out of 9 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-11-23 14:06:58,435 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-23 14:06:58,436 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 [2021-11-23 14:06:58,460 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-23 14:06:58,481 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-11-23 14:06:58,481 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-11-23 14:06:58,482 INFO L513 LassoAnalysis]: Proved termination. [2021-11-23 14:06:58,482 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2021-11-23 14:06:58,503 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2021-11-23 14:06:58,524 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Forceful destruction successful, exit code 0 [2021-11-23 14:06:58,525 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-11-23 14:06:58,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:06:58,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:58,651 INFO L263 TraceCheckSpWp]: Trace formula consists of 600 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-23 14:06:58,655 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 14:06:58,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:06:58,806 INFO L263 TraceCheckSpWp]: Trace formula consists of 154 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-23 14:06:58,811 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 14:06:59,118 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:06:59,124 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2021-11-23 14:06:59,125 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 13661 states and 25196 transitions. cyclomatic complexity: 11537 Second operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:00,806 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 13661 states and 25196 transitions. cyclomatic complexity: 11537. Second operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 40138 states and 74108 transitions. Complement of second has 11 states. [2021-11-23 14:07:00,807 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 6 states 1 stem states 4 non-accepting loop states 1 accepting loop states [2021-11-23 14:07:00,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:00,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 6736 transitions. [2021-11-23 14:07:00,823 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 46 letters. Loop has 41 letters. [2021-11-23 14:07:00,826 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-23 14:07:00,827 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 87 letters. Loop has 41 letters. [2021-11-23 14:07:00,828 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-23 14:07:00,828 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 46 letters. Loop has 82 letters. [2021-11-23 14:07:00,831 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-23 14:07:00,832 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40138 states and 74108 transitions. [2021-11-23 14:07:01,149 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20337 [2021-11-23 14:07:01,370 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40138 states to 40138 states and 74108 transitions. [2021-11-23 14:07:01,370 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26597 [2021-11-23 14:07:01,409 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26998 [2021-11-23 14:07:01,409 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40138 states and 74108 transitions. [2021-11-23 14:07:01,410 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:01,410 INFO L681 BuchiCegarLoop]: Abstraction has 40138 states and 74108 transitions. [2021-11-23 14:07:01,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40138 states and 74108 transitions. [2021-11-23 14:07:01,958 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa6cfacd-915a-4b5a-9ff9-160be96655df/bin/uautomizer-wIGwrQj20G/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2021-11-23 14:07:02,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40138 to 39523. [2021-11-23 14:07:02,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39523 states, 39523 states have (on average 1.8504162133441286) internal successors, (73134), 39522 states have internal predecessors, (73134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:02,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39523 states to 39523 states and 73134 transitions. [2021-11-23 14:07:02,737 INFO L704 BuchiCegarLoop]: Abstraction has 39523 states and 73134 transitions. [2021-11-23 14:07:02,737 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:02,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 14:07:02,738 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 14:07:02,739 INFO L87 Difference]: Start difference. First operand 39523 states and 73134 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:03,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:03,236 INFO L93 Difference]: Finished difference Result 39523 states and 73128 transitions. [2021-11-23 14:07:03,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 14:07:03,239 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39523 states and 73128 transitions. [2021-11-23 14:07:03,607 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:03,786 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39523 states to 39523 states and 73128 transitions. [2021-11-23 14:07:03,786 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26429 [2021-11-23 14:07:03,817 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26429 [2021-11-23 14:07:03,817 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39523 states and 73128 transitions. [2021-11-23 14:07:03,828 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:03,828 INFO L681 BuchiCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2021-11-23 14:07:03,854 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39523 states and 73128 transitions. [2021-11-23 14:07:04,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39523 to 39523. [2021-11-23 14:07:04,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39523 states, 39523 states have (on average 1.8502644030058446) internal successors, (73128), 39522 states have internal predecessors, (73128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:04,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39523 states to 39523 states and 73128 transitions. [2021-11-23 14:07:04,884 INFO L704 BuchiCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2021-11-23 14:07:04,884 INFO L587 BuchiCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2021-11-23 14:07:04,884 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-11-23 14:07:04,884 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39523 states and 73128 transitions. [2021-11-23 14:07:04,991 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:04,991 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:04,991 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:04,993 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:04,993 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:04,994 INFO L791 eck$LassoCheckResult]: Stem: 223322#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 223323#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 225084#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 224987#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 223724#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 223291#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 222958#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 222959#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 224225#L467 assume !(0 == getOrigin_~person#1); 223452#L471 assume !(1 == getOrigin_~person#1); 223453#L475 assume !(2 == getOrigin_~person#1); 223150#L479 assume !(3 == getOrigin_~person#1); 223151#L483 assume !(4 == getOrigin_~person#1); 223281#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 224251#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 224680#L3068 assume 0 == initPersonOnFloor_~floor#1; 221758#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 221440#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 223413#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 222949#L2872-2 assume { :end_inline_callOnFloor } true; 225189#L3212 assume { :end_inline_initPersonOnFloor } true; 223798#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 223799#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 224421#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 224422#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 222093#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 222095#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 225536#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 225453#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 225454#L1966 assume !(0 != timeShift_~tmp___9~2#1); 225194#L2057 assume !(1 == ~doorState~0); 225195#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 221502#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 221503#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 225833#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 225834#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 233645#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 233644#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 233643#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 222115#L1753 assume !(1 == ~currentHeading~0); 222116#L1763 assume !(0 == ~currentFloorID~0); 225162#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 225163#L1769-1 assume { :end_inline_continueInDirection } true; 222828#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 222829#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 223078#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 223079#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 221676#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 221677#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 221549#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 223569#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 224264#L207-2 assume !false; 240006#L208 [2021-11-23 14:07:04,994 INFO L793 eck$LassoCheckResult]: Loop: 240006#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 250526#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 250525#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 250524#L215 assume 1 != cleanup_~tmp___0~0#1; 250523#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250522#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 250521#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 250500#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 250491#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 250486#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 250484#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250483#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 240497#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 250482#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 250479#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250480#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 250485#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 250465#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 250466#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 251101#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 251100#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 249898#L1968-2 assume !(0 != ~persons_0~0); 260767#L1968-3 assume !(0 != ~persons_1~0); 260761#L1982-1 assume !(0 != ~persons_2~0); 260741#L1996-1 assume !(0 != ~persons_3~0); 260737#L2010-1 assume !(0 != ~persons_4~0); 260732#L2024-1 assume !(0 != ~persons_5~0); 260728#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260727#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 260702#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 260685#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 260683#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 260681#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260680#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 260660#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 260646#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 260574#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 260393#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260392#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 260373#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 260350#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 260348#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 260346#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260344#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 260335#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 260311#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 260308#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 260306#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260305#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 225004#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 221621#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 224169#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 224170#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 224458#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 222661#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 221428#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 223420#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 222433#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 254754#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 254749#L2844-41 assume { :end_inline_resetCallOnFloor } true; 254748#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 254745#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 250575#L1127-5 assume { :end_inline_resetFloorButton } true; 250571#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 250568#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 250565#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 250564#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 250563#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 250546#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 250536#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 250530#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 250527#L207-2 assume !false; 240006#L208 [2021-11-23 14:07:04,995 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:04,995 INFO L85 PathProgramCache]: Analyzing trace with hash -1486397763, now seen corresponding path program 1 times [2021-11-23 14:07:04,995 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:04,995 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882122000] [2021-11-23 14:07:04,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:04,996 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:05,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:05,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:05,063 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:05,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882122000] [2021-11-23 14:07:05,064 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882122000] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:05,064 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:05,064 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-23 14:07:05,065 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1588740393] [2021-11-23 14:07:05,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:05,065 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:05,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:05,066 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 1 times [2021-11-23 14:07:05,066 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:05,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1287955086] [2021-11-23 14:07:05,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:05,067 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:05,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:05,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:05,158 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:05,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1287955086] [2021-11-23 14:07:05,158 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1287955086] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:05,158 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:05,159 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:05,159 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [76159727] [2021-11-23 14:07:05,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:05,159 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:05,159 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:05,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 14:07:05,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-23 14:07:05,160 INFO L87 Difference]: Start difference. First operand 39523 states and 73128 transitions. cyclomatic complexity: 33614 Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 6 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:05,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:05,618 INFO L93 Difference]: Finished difference Result 39517 states and 73115 transitions. [2021-11-23 14:07:05,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 14:07:05,619 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73115 transitions. [2021-11-23 14:07:05,910 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:06,069 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73115 transitions. [2021-11-23 14:07:06,070 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2021-11-23 14:07:06,124 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2021-11-23 14:07:06,125 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73115 transitions. [2021-11-23 14:07:06,126 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:06,126 INFO L681 BuchiCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2021-11-23 14:07:06,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73115 transitions. [2021-11-23 14:07:06,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2021-11-23 14:07:06,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.850216362578131) internal successors, (73115), 39516 states have internal predecessors, (73115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:06,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73115 transitions. [2021-11-23 14:07:06,970 INFO L704 BuchiCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2021-11-23 14:07:06,970 INFO L587 BuchiCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2021-11-23 14:07:06,971 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-11-23 14:07:06,971 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73115 transitions. [2021-11-23 14:07:07,097 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:07,097 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:07,097 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:07,099 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:07,099 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:07,100 INFO L791 eck$LassoCheckResult]: Stem: 302380#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 302381#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 304093#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 303996#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 302773#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 302355#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 302019#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 302020#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 303272#L467 assume !(0 == getOrigin_~person#1); 302506#L471 assume !(1 == getOrigin_~person#1); 302507#L475 assume !(2 == getOrigin_~person#1); 302213#L479 assume !(3 == getOrigin_~person#1); 302214#L483 assume !(4 == getOrigin_~person#1); 302340#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 303296#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 303703#L3068 assume !(0 == initPersonOnFloor_~floor#1); 302323#L3095 assume 1 == initPersonOnFloor_~floor#1; 302324#L3096 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 300502#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 302466#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 302010#L2872-2 assume { :end_inline_callOnFloor } true; 304191#L3212 assume { :end_inline_initPersonOnFloor } true; 302852#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 302853#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 303463#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 303464#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 301151#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 301153#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 304496#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 304434#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 304435#L1966 assume !(0 != timeShift_~tmp___9~2#1); 304196#L2057 assume !(1 == ~doorState~0); 304197#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 312956#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 312955#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 312954#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 304419#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 304420#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 306249#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 306246#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 306248#L1753 assume !(1 == ~currentHeading~0); 312218#L1763 assume !(0 == ~currentFloorID~0); 304507#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 311994#L1769-1 assume { :end_inline_continueInDirection } true; 318879#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 318878#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 318877#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 318875#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 318876#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 318859#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 318846#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 318844#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 318840#L207-2 assume !false; 318841#L208 [2021-11-23 14:07:07,100 INFO L793 eck$LassoCheckResult]: Loop: 318841#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 328465#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 328459#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 328449#L215 assume 1 != cleanup_~tmp___0~0#1; 328437#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 328395#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 328360#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 328349#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 328339#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 328337#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 328336#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 328334#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 320842#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 328331#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 328328#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 328307#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 328292#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 328281#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 328275#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 328272#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 328269#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 328270#L1968-2 assume !(0 != ~persons_0~0); 335515#L1968-3 assume !(0 != ~persons_1~0); 335509#L1982-1 assume !(0 != ~persons_2~0); 335478#L1996-1 assume !(0 != ~persons_3~0); 335473#L2010-1 assume !(0 != ~persons_4~0); 335468#L2024-1 assume !(0 != ~persons_5~0); 335464#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335462#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 335374#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335357#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 335355#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 335353#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335352#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 335329#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335309#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 335307#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 335305#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335303#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 335284#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335261#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 335259#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 335257#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335256#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 335231#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335204#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 335202#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 335200#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335198#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 335192#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335166#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 335157#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 335156#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335155#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 335149#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335114#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 335112#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 335110#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 335109#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 335104#L2844-41 assume { :end_inline_resetCallOnFloor } true; 335103#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 335101#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 335097#L1127-5 assume { :end_inline_resetFloorButton } true; 335096#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 335093#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 335090#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 335087#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 335086#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 335084#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 335074#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 335073#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 335071#L207-2 assume !false; 318841#L208 [2021-11-23 14:07:07,101 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:07,101 INFO L85 PathProgramCache]: Analyzing trace with hash 743878906, now seen corresponding path program 1 times [2021-11-23 14:07:07,101 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:07,101 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [950912747] [2021-11-23 14:07:07,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:07,102 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:07,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:07,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:07,148 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:07,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [950912747] [2021-11-23 14:07:07,149 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [950912747] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:07,149 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:07,149 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:07,149 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1122049055] [2021-11-23 14:07:07,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:07,150 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:07,150 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:07,150 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 2 times [2021-11-23 14:07:07,150 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:07,150 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1775736578] [2021-11-23 14:07:07,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:07,151 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:07,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:07,214 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:07,214 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:07,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1775736578] [2021-11-23 14:07:07,214 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1775736578] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:07,215 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:07,215 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:07,215 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1201938404] [2021-11-23 14:07:07,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:07,216 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:07,216 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:07,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 14:07:07,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 14:07:07,217 INFO L87 Difference]: Start difference. First operand 39517 states and 73115 transitions. cyclomatic complexity: 33607 Second operand has 4 states, 4 states have (on average 13.25) internal successors, (53), 4 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:07,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:07,681 INFO L93 Difference]: Finished difference Result 39517 states and 73111 transitions. [2021-11-23 14:07:07,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 14:07:07,682 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73111 transitions. [2021-11-23 14:07:07,816 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:07,961 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73111 transitions. [2021-11-23 14:07:07,961 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2021-11-23 14:07:07,984 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2021-11-23 14:07:07,984 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73111 transitions. [2021-11-23 14:07:07,986 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:07,986 INFO L681 BuchiCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2021-11-23 14:07:08,015 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73111 transitions. [2021-11-23 14:07:08,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2021-11-23 14:07:08,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8501151403193563) internal successors, (73111), 39516 states have internal predecessors, (73111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:08,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73111 transitions. [2021-11-23 14:07:08,867 INFO L704 BuchiCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2021-11-23 14:07:08,867 INFO L587 BuchiCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2021-11-23 14:07:08,868 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-11-23 14:07:08,868 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73111 transitions. [2021-11-23 14:07:09,212 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:09,216 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:09,216 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:09,219 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:09,219 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:09,221 INFO L791 eck$LassoCheckResult]: Stem: 381422#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 381423#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 383141#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 383046#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 381818#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 381395#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 381067#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 381068#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 382310#L467 assume !(0 == getOrigin_~person#1); 381547#L471 assume !(1 == getOrigin_~person#1); 381548#L475 assume !(2 == getOrigin_~person#1); 381254#L479 assume !(3 == getOrigin_~person#1); 381255#L483 assume !(4 == getOrigin_~person#1); 381383#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 382342#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 382749#L3068 assume !(0 == initPersonOnFloor_~floor#1); 381369#L3095 assume 1 == initPersonOnFloor_~floor#1; 381370#L3096 assume !(0 == initPersonOnFloor_~person#1); 383103#L3099 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 379545#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 381509#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 381054#L2872-2 assume { :end_inline_callOnFloor } true; 383235#L3212 assume { :end_inline_initPersonOnFloor } true; 381893#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 381894#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 382507#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 382508#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 380195#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 380197#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 383559#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 383560#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 383368#L1966 assume !(0 != timeShift_~tmp___9~2#1); 383370#L2057 assume !(1 == ~doorState~0); 381473#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 381474#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 380054#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 380055#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 383481#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 383482#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 385313#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 385311#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 380218#L1753 assume !(1 == ~currentHeading~0); 380219#L1763 assume !(0 == ~currentFloorID~0); 383568#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 391055#L1769-1 assume { :end_inline_continueInDirection } true; 397607#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 397606#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 397605#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 397604#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 397603#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 397598#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 397595#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 397594#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 397592#L207-2 assume !false; 397593#L208 [2021-11-23 14:07:09,222 INFO L793 eck$LassoCheckResult]: Loop: 397593#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 410073#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 410072#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 410071#L215 assume 1 != cleanup_~tmp___0~0#1; 410070#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 410069#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 410068#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 410052#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 410043#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 410042#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 410041#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 410040#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 400191#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 410039#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 410038#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 408039#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 408034#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 408013#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 408014#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 408961#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 408959#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 408960#L1968-2 assume !(0 != ~persons_0~0); 410426#L1968-3 assume !(0 != ~persons_1~0); 410420#L1982-1 assume !(0 != ~persons_2~0); 410395#L1996-1 assume !(0 != ~persons_3~0); 410390#L2010-1 assume !(0 != ~persons_4~0); 410385#L2024-1 assume !(0 != ~persons_5~0); 410381#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410380#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 410355#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410338#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 410336#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 410334#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410333#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 410313#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410293#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 410291#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 410289#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410288#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 410269#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410246#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 410244#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 410242#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410241#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 410226#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410199#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 410197#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 410195#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410194#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 410184#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410158#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 410149#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 410148#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410147#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 410141#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410106#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 410104#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 410102#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 410101#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 410096#L2844-41 assume { :end_inline_resetCallOnFloor } true; 410095#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 410090#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 410086#L1127-5 assume { :end_inline_resetFloorButton } true; 410085#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 410084#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 410083#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 410082#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 408320#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 410081#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 408104#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 410075#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 410074#L207-2 assume !false; 397593#L208 [2021-11-23 14:07:09,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:09,222 INFO L85 PathProgramCache]: Analyzing trace with hash -1651182822, now seen corresponding path program 1 times [2021-11-23 14:07:09,222 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:09,222 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [874969072] [2021-11-23 14:07:09,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:09,223 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:09,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:09,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:09,335 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:09,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [874969072] [2021-11-23 14:07:09,335 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [874969072] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:09,335 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:09,336 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:09,336 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1338440415] [2021-11-23 14:07:09,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:09,336 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:09,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:09,337 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 3 times [2021-11-23 14:07:09,337 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:09,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37522757] [2021-11-23 14:07:09,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:09,338 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:09,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:09,384 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:09,385 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:09,385 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [37522757] [2021-11-23 14:07:09,385 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [37522757] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:09,385 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:09,385 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:09,386 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2050009910] [2021-11-23 14:07:09,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:09,386 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:09,386 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:09,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 14:07:09,387 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 14:07:09,387 INFO L87 Difference]: Start difference. First operand 39517 states and 73111 transitions. cyclomatic complexity: 33603 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:09,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:09,568 INFO L93 Difference]: Finished difference Result 39517 states and 73107 transitions. [2021-11-23 14:07:09,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 14:07:09,569 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73107 transitions. [2021-11-23 14:07:09,702 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:09,833 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73107 transitions. [2021-11-23 14:07:09,833 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2021-11-23 14:07:09,858 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2021-11-23 14:07:09,858 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73107 transitions. [2021-11-23 14:07:09,860 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:09,860 INFO L681 BuchiCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2021-11-23 14:07:09,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73107 transitions. [2021-11-23 14:07:10,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2021-11-23 14:07:10,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8500139180605815) internal successors, (73107), 39516 states have internal predecessors, (73107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:10,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73107 transitions. [2021-11-23 14:07:10,872 INFO L704 BuchiCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2021-11-23 14:07:10,872 INFO L587 BuchiCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2021-11-23 14:07:10,872 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-11-23 14:07:10,872 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73107 transitions. [2021-11-23 14:07:10,986 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:10,986 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:10,986 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:10,989 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:10,990 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:10,990 INFO L791 eck$LassoCheckResult]: Stem: 460481#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 460482#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 462222#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 462123#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 460877#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 460452#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 460122#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 460123#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 461375#L467 assume !(0 == getOrigin_~person#1); 460609#L471 assume !(1 == getOrigin_~person#1); 460610#L475 assume !(2 == getOrigin_~person#1); 460310#L479 assume !(3 == getOrigin_~person#1); 460311#L483 assume !(4 == getOrigin_~person#1); 460440#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 461406#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 461825#L3068 assume !(0 == initPersonOnFloor_~floor#1); 460426#L3095 assume 1 == initPersonOnFloor_~floor#1; 460427#L3096 assume !(0 == initPersonOnFloor_~person#1); 462178#L3099 assume !(1 == initPersonOnFloor_~person#1); 459932#L3102 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 458594#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 460571#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 460109#L2872-2 assume { :end_inline_callOnFloor } true; 462318#L3212 assume { :end_inline_initPersonOnFloor } true; 460953#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 460954#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 461575#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 461576#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 459246#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 459248#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 462674#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 462675#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 462471#L1966 assume !(0 != timeShift_~tmp___9~2#1); 462473#L2057 assume !(1 == ~doorState~0); 464179#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 471920#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 471919#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 471918#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 471917#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 471861#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 471860#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 471859#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 459269#L1753 assume !(1 == ~currentHeading~0); 459270#L1763 assume !(0 == ~currentFloorID~0); 461587#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 462091#L1769-1 assume { :end_inline_continueInDirection } true; 459996#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 459997#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 460240#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 460241#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 475865#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 475851#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 475848#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 475846#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 475844#L207-2 assume !false; 475845#L208 [2021-11-23 14:07:10,991 INFO L793 eck$LassoCheckResult]: Loop: 475845#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 487050#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 487049#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 487048#L215 assume 1 != cleanup_~tmp___0~0#1; 487047#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 487046#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 487045#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 487001#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 486992#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 486991#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 486990#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 486989#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 478940#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 486988#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 486430#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 486403#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 486387#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 486374#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 486375#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 486364#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 486359#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 486360#L1968-2 assume !(0 != ~persons_0~0); 488483#L1968-3 assume !(0 != ~persons_1~0); 488477#L1982-1 assume !(0 != ~persons_2~0); 488452#L1996-1 assume !(0 != ~persons_3~0); 488447#L2010-1 assume !(0 != ~persons_4~0); 488442#L2024-1 assume !(0 != ~persons_5~0); 488438#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488437#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 488412#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488395#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 488393#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 488391#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488390#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 488370#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488350#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 488348#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 488346#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488345#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 488326#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488303#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 488301#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 488299#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488298#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 488283#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488256#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 488254#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 488252#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488251#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 488181#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488149#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 488146#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 488145#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488143#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 487864#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 487815#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 487793#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 487790#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 487758#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 487071#L2844-41 assume { :end_inline_resetCallOnFloor } true; 487069#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 487067#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 487063#L1127-5 assume { :end_inline_resetFloorButton } true; 487062#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 487061#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 487060#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 487059#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 486578#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 487058#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 486540#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 487052#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 487051#L207-2 assume !false; 475845#L208 [2021-11-23 14:07:11,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:11,000 INFO L85 PathProgramCache]: Analyzing trace with hash -1722085675, now seen corresponding path program 1 times [2021-11-23 14:07:11,001 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:11,001 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106121894] [2021-11-23 14:07:11,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:11,001 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:11,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:11,066 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:11,066 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:11,066 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106121894] [2021-11-23 14:07:11,067 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106121894] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:11,067 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:11,067 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:11,067 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1686982174] [2021-11-23 14:07:11,067 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:11,068 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:11,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:11,070 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 4 times [2021-11-23 14:07:11,070 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:11,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1844414193] [2021-11-23 14:07:11,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:11,071 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:11,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:11,142 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:11,142 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:11,143 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1844414193] [2021-11-23 14:07:11,143 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1844414193] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:11,143 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:11,143 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:11,147 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1492274225] [2021-11-23 14:07:11,147 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:11,147 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:11,148 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:11,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 14:07:11,149 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 14:07:11,149 INFO L87 Difference]: Start difference. First operand 39517 states and 73107 transitions. cyclomatic complexity: 33599 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:11,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:11,476 INFO L93 Difference]: Finished difference Result 39517 states and 73103 transitions. [2021-11-23 14:07:11,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 14:07:11,478 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73103 transitions. [2021-11-23 14:07:12,205 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:12,355 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73103 transitions. [2021-11-23 14:07:12,355 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2021-11-23 14:07:12,380 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2021-11-23 14:07:12,381 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73103 transitions. [2021-11-23 14:07:12,381 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:12,381 INFO L681 BuchiCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2021-11-23 14:07:12,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73103 transitions. [2021-11-23 14:07:12,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2021-11-23 14:07:12,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8499126958018068) internal successors, (73103), 39516 states have internal predecessors, (73103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:12,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73103 transitions. [2021-11-23 14:07:12,901 INFO L704 BuchiCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2021-11-23 14:07:12,901 INFO L587 BuchiCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2021-11-23 14:07:12,901 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-11-23 14:07:12,901 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73103 transitions. [2021-11-23 14:07:12,998 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:12,998 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:12,998 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:13,001 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:13,001 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:13,002 INFO L791 eck$LassoCheckResult]: Stem: 539523#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 539524#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 541241#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 541147#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 539915#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 539494#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 539164#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 539165#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 540408#L467 assume !(0 == getOrigin_~person#1); 539649#L471 assume !(1 == getOrigin_~person#1); 539650#L475 assume !(2 == getOrigin_~person#1); 539355#L479 assume !(3 == getOrigin_~person#1); 539356#L483 assume !(4 == getOrigin_~person#1); 539484#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 540432#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 540847#L3068 assume !(0 == initPersonOnFloor_~floor#1); 539467#L3095 assume !(1 == initPersonOnFloor_~floor#1); 539469#L3122 assume !(2 == initPersonOnFloor_~floor#1); 540726#L3149 assume !(3 == initPersonOnFloor_~floor#1); 541617#L3176 assume !(4 == initPersonOnFloor_~floor#1); 537649#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 539610#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 539155#L2872-2 assume { :end_inline_callOnFloor } true; 541334#L3212 assume { :end_inline_initPersonOnFloor } true; 539989#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 539990#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 540600#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 540601#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 538300#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 538302#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 541650#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 541583#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 541584#L1966 assume !(0 != timeShift_~tmp___9~2#1); 541339#L2057 assume !(1 == ~doorState~0); 539575#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 537711#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 537712#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 543401#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 541571#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 541572#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 540773#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 540774#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 538323#L1753 assume !(1 == ~currentHeading~0); 538324#L1763 assume !(0 == ~currentFloorID~0); 540615#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 541116#L1769-1 assume { :end_inline_continueInDirection } true; 539037#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 539038#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 539282#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 539283#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 537887#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 537888#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 537759#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 539763#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 540445#L207-2 assume !false; 556455#L208 [2021-11-23 14:07:13,002 INFO L793 eck$LassoCheckResult]: Loop: 556455#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 566630#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 566629#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 566628#L215 assume 1 != cleanup_~tmp___0~0#1; 566627#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 566626#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 566625#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 565529#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 565519#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 565517#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 565516#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 565514#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 558040#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 565507#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 565504#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 565505#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 567225#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 567209#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 567207#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 567204#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 567200#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 567201#L1968-2 assume !(0 != ~persons_0~0); 574714#L1968-3 assume !(0 != ~persons_1~0); 574708#L1982-1 assume !(0 != ~persons_2~0); 574683#L1996-1 assume !(0 != ~persons_3~0); 574678#L2010-1 assume !(0 != ~persons_4~0); 574673#L2024-1 assume !(0 != ~persons_5~0); 574669#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 574668#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 574643#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 574626#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 574624#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 574622#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 574621#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 573796#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 573776#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 573774#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 573772#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 573771#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 573752#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 573729#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 573727#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 573725#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 573724#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 573643#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 573617#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 573614#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 573611#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 573609#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 573603#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 573577#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 573513#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 573256#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 568873#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 568614#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 568578#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 568568#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 568565#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 568564#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 568559#L2844-41 assume { :end_inline_resetCallOnFloor } true; 568558#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 566650#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 566646#L1127-5 assume { :end_inline_resetFloorButton } true; 566644#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 566642#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 566641#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 566639#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 565621#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 566638#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 565588#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 566632#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 566631#L207-2 assume !false; 556455#L208 [2021-11-23 14:07:13,003 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:13,003 INFO L85 PathProgramCache]: Analyzing trace with hash 1107673685, now seen corresponding path program 1 times [2021-11-23 14:07:13,003 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:13,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [948751873] [2021-11-23 14:07:13,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:13,004 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:13,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:13,047 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:13,047 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:13,047 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [948751873] [2021-11-23 14:07:13,047 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [948751873] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:13,048 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:13,048 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:13,048 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705024190] [2021-11-23 14:07:13,048 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:13,049 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:13,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:13,049 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 5 times [2021-11-23 14:07:13,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:13,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [546123532] [2021-11-23 14:07:13,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:13,050 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:13,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:13,112 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:13,112 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:13,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [546123532] [2021-11-23 14:07:13,113 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [546123532] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:13,113 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:13,113 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:13,113 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1347420653] [2021-11-23 14:07:13,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:13,114 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:13,114 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:13,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 14:07:13,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 14:07:13,115 INFO L87 Difference]: Start difference. First operand 39517 states and 73103 transitions. cyclomatic complexity: 33595 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:13,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:13,715 INFO L93 Difference]: Finished difference Result 39496 states and 73069 transitions. [2021-11-23 14:07:13,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 14:07:13,716 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73069 transitions. [2021-11-23 14:07:13,890 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:14,039 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73069 transitions. [2021-11-23 14:07:14,039 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-11-23 14:07:14,066 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-11-23 14:07:14,066 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73069 transitions. [2021-11-23 14:07:14,067 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:14,067 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2021-11-23 14:07:14,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73069 transitions. [2021-11-23 14:07:14,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-11-23 14:07:14,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8500354466275066) internal successors, (73069), 39495 states have internal predecessors, (73069), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:14,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73069 transitions. [2021-11-23 14:07:14,960 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2021-11-23 14:07:14,960 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2021-11-23 14:07:14,960 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-11-23 14:07:14,961 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73069 transitions. [2021-11-23 14:07:15,053 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:15,053 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:15,053 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:15,054 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:15,054 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:15,055 INFO L791 eck$LassoCheckResult]: Stem: 618543#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 618544#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 620265#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 620172#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 618942#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 618515#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 618181#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 618182#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 619436#L467 assume !(0 == getOrigin_~person#1); 618672#L471 assume !(1 == getOrigin_~person#1); 618673#L475 assume !(2 == getOrigin_~person#1); 618378#L479 assume !(3 == getOrigin_~person#1); 618379#L483 assume !(4 == getOrigin_~person#1); 618505#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 619461#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 619875#L3068 assume !(0 == initPersonOnFloor_~floor#1); 618490#L3095 assume 1 == initPersonOnFloor_~floor#1; 618491#L3096 assume !(0 == initPersonOnFloor_~person#1); 620224#L3099 assume !(1 == initPersonOnFloor_~person#1); 617995#L3102 assume !(2 == initPersonOnFloor_~person#1); 617996#L3105 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 619803#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 618632#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 618172#L2872-2 assume { :end_inline_callOnFloor } true; 620354#L3212 assume { :end_inline_initPersonOnFloor } true; 619017#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 619018#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 619720#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 620678#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 620676#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 620675#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 620654#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 620655#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 620485#L1966 assume !(0 != timeShift_~tmp___9~2#1); 620486#L2057 assume !(1 == ~doorState~0); 620902#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 626969#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 626968#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 626967#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 626966#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 620062#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 617452#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 619809#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 617347#L1753 assume !(1 == ~currentHeading~0); 617348#L1763 assume !(0 == ~currentFloorID~0); 620661#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 627184#L1769-1 assume { :end_inline_continueInDirection } true; 633481#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 633480#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 633479#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 633477#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 633478#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 633476#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 616784#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 618790#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 633441#L207-2 assume !false; 633442#L208 [2021-11-23 14:07:15,055 INFO L793 eck$LassoCheckResult]: Loop: 633442#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 645953#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 645952#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 645951#L215 assume 1 != cleanup_~tmp___0~0#1; 645950#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 645945#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 645943#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 645927#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 645918#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 645917#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 645916#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 645915#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 637296#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 645914#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 645908#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 645906#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 645898#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 645890#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 645889#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 645887#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 645886#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 645442#L1968-2 assume !(0 != ~persons_0~0); 647291#L1968-3 assume !(0 != ~persons_1~0); 647285#L1982-1 assume !(0 != ~persons_2~0); 647260#L1996-1 assume !(0 != ~persons_3~0); 647255#L2010-1 assume !(0 != ~persons_4~0); 647250#L2024-1 assume !(0 != ~persons_5~0); 647246#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647245#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 647220#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647203#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 647201#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 647199#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647198#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 647178#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647158#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 647156#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 647154#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647153#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 647134#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647111#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 647109#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 647107#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647106#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 647091#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647064#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 647062#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 647060#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647059#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 647049#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647023#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 647014#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 647013#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647012#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 646036#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 646001#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 645999#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 645997#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 645996#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 645991#L2844-41 assume { :end_inline_resetCallOnFloor } true; 645990#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 645988#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 645984#L1127-5 assume { :end_inline_resetFloorButton } true; 645981#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 645978#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 645977#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 645975#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 645973#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 645971#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 645957#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 645955#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 645954#L207-2 assume !false; 633442#L208 [2021-11-23 14:07:15,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:15,056 INFO L85 PathProgramCache]: Analyzing trace with hash 1536459861, now seen corresponding path program 1 times [2021-11-23 14:07:15,056 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:15,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1686145658] [2021-11-23 14:07:15,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:15,057 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:15,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:15,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:15,093 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:15,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1686145658] [2021-11-23 14:07:15,094 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1686145658] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:15,094 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:15,094 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:15,094 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [62236016] [2021-11-23 14:07:15,094 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:15,095 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:15,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:15,095 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 6 times [2021-11-23 14:07:15,095 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:15,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1166508898] [2021-11-23 14:07:15,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:15,096 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:15,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:15,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:15,149 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:15,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1166508898] [2021-11-23 14:07:15,150 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1166508898] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:15,150 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:15,150 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:15,150 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [769695313] [2021-11-23 14:07:15,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:15,151 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:15,151 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:15,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 14:07:15,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 14:07:15,152 INFO L87 Difference]: Start difference. First operand 39496 states and 73069 transitions. cyclomatic complexity: 33582 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:15,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:15,368 INFO L93 Difference]: Finished difference Result 39496 states and 73068 transitions. [2021-11-23 14:07:15,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 14:07:15,369 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73068 transitions. [2021-11-23 14:07:15,525 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:15,641 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73068 transitions. [2021-11-23 14:07:15,641 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-11-23 14:07:15,662 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-11-23 14:07:15,662 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73068 transitions. [2021-11-23 14:07:15,664 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:15,665 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2021-11-23 14:07:15,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73068 transitions. [2021-11-23 14:07:16,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-11-23 14:07:16,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.850010127607859) internal successors, (73068), 39495 states have internal predecessors, (73068), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:16,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73068 transitions. [2021-11-23 14:07:16,663 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2021-11-23 14:07:16,663 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2021-11-23 14:07:16,663 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-11-23 14:07:16,663 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73068 transitions. [2021-11-23 14:07:16,794 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:16,794 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:16,794 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:16,797 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:16,797 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:16,798 INFO L791 eck$LassoCheckResult]: Stem: 697557#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 697558#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 699294#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 699204#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 697959#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 697530#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 697197#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 697198#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 698461#L467 assume !(0 == getOrigin_~person#1); 697689#L471 assume !(1 == getOrigin_~person#1); 697690#L475 assume !(2 == getOrigin_~person#1); 697387#L479 assume !(3 == getOrigin_~person#1); 697388#L483 assume !(4 == getOrigin_~person#1); 697518#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 698489#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 698912#L3068 assume !(0 == initPersonOnFloor_~floor#1); 697504#L3095 assume 1 == initPersonOnFloor_~floor#1; 697505#L3096 assume !(0 == initPersonOnFloor_~person#1); 699256#L3099 assume !(1 == initPersonOnFloor_~person#1); 697009#L3102 assume !(2 == initPersonOnFloor_~person#1); 697010#L3105 assume !(3 == initPersonOnFloor_~person#1); 699466#L3108 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 698834#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 697648#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 697184#L2872-2 assume { :end_inline_callOnFloor } true; 699390#L3212 assume { :end_inline_initPersonOnFloor } true; 698033#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 698034#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 698749#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 699734#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 699732#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 699731#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 699712#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 699713#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 699520#L1966 assume !(0 != timeShift_~tmp___9~2#1); 699522#L2057 assume !(1 == ~doorState~0); 699960#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 707605#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 707604#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 707603#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 707601#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 701552#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 701551#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 698913#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 696348#L1753 assume !(1 == ~currentHeading~0); 696349#L1763 assume !(0 == ~currentFloorID~0); 698668#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 699175#L1769-1 assume { :end_inline_continueInDirection } true; 697067#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 697068#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 697313#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 697314#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 699221#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 713228#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 713214#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 698503#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 698504#L207-2 assume !false; 714435#L208 [2021-11-23 14:07:16,799 INFO L793 eck$LassoCheckResult]: Loop: 714435#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 728206#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 728205#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 728204#L215 assume 1 != cleanup_~tmp___0~0#1; 728203#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 728198#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 728196#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 728190#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 728181#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 728180#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 728179#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 728178#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 716762#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 728173#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 728170#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 728169#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 728164#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 728155#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 728153#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 728151#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 724398#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 723915#L1968-2 assume !(0 != ~persons_0~0); 732963#L1968-3 assume !(0 != ~persons_1~0); 732942#L1982-1 assume !(0 != ~persons_2~0); 732918#L1996-1 assume !(0 != ~persons_3~0); 732906#L2010-1 assume !(0 != ~persons_4~0); 732899#L2024-1 assume !(0 != ~persons_5~0); 732895#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732893#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 732864#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732852#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 732844#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 732842#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732841#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 732700#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732680#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 732678#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 732676#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732675#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 732592#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732575#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 732571#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 732569#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732568#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 732550#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732528#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 732520#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 732516#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732515#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 729146#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 729120#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 728303#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 728302#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 728301#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 728290#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 728255#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 728253#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 728251#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 728250#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 728245#L2844-41 assume { :end_inline_resetCallOnFloor } true; 728244#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 728242#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 728238#L1127-5 assume { :end_inline_resetFloorButton } true; 728237#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 728236#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 728235#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 728228#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 728226#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 728224#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 728210#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 728208#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 728207#L207-2 assume !false; 714435#L208 [2021-11-23 14:07:16,800 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:16,800 INFO L85 PathProgramCache]: Analyzing trace with hash 633723056, now seen corresponding path program 1 times [2021-11-23 14:07:16,800 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:16,801 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2132720975] [2021-11-23 14:07:16,801 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:16,801 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:16,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:16,852 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:16,852 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:16,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2132720975] [2021-11-23 14:07:16,853 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2132720975] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:16,853 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:16,853 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:16,854 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [39064687] [2021-11-23 14:07:16,854 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:16,854 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:16,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:16,855 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 7 times [2021-11-23 14:07:16,855 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:16,855 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [896169458] [2021-11-23 14:07:16,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:16,856 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:16,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:16,914 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:16,914 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:16,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [896169458] [2021-11-23 14:07:16,915 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [896169458] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:16,915 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:16,915 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:16,916 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1066832524] [2021-11-23 14:07:16,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:16,916 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:16,917 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:16,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 14:07:16,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 14:07:16,918 INFO L87 Difference]: Start difference. First operand 39496 states and 73068 transitions. cyclomatic complexity: 33581 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:17,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:17,176 INFO L93 Difference]: Finished difference Result 39496 states and 73067 transitions. [2021-11-23 14:07:17,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 14:07:17,177 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73067 transitions. [2021-11-23 14:07:17,381 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:17,522 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73067 transitions. [2021-11-23 14:07:17,522 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-11-23 14:07:17,544 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-11-23 14:07:17,544 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73067 transitions. [2021-11-23 14:07:17,551 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:17,551 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2021-11-23 14:07:17,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73067 transitions. [2021-11-23 14:07:18,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-11-23 14:07:18,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499848085882116) internal successors, (73067), 39495 states have internal predecessors, (73067), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:18,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73067 transitions. [2021-11-23 14:07:18,576 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2021-11-23 14:07:18,576 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2021-11-23 14:07:18,576 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-11-23 14:07:18,576 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73067 transitions. [2021-11-23 14:07:18,662 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:18,662 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:18,662 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:18,663 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:18,664 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:18,664 INFO L791 eck$LassoCheckResult]: Stem: 776558#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 776559#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 778310#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 778222#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 776957#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 776531#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 776205#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 776206#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 777459#L467 assume !(0 == getOrigin_~person#1); 776686#L471 assume !(1 == getOrigin_~person#1); 776687#L475 assume !(2 == getOrigin_~person#1); 776391#L479 assume !(3 == getOrigin_~person#1); 776392#L483 assume !(4 == getOrigin_~person#1); 776519#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 777493#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 777920#L3068 assume !(0 == initPersonOnFloor_~floor#1); 776506#L3095 assume 1 == initPersonOnFloor_~floor#1; 776507#L3096 assume !(0 == initPersonOnFloor_~person#1); 778273#L3099 assume !(1 == initPersonOnFloor_~person#1); 776019#L3102 assume !(2 == initPersonOnFloor_~person#1); 776020#L3105 assume !(3 == initPersonOnFloor_~person#1); 778488#L3108 assume !(4 == initPersonOnFloor_~person#1); 778552#L3111 assume !(5 == initPersonOnFloor_~person#1); 777846#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 776646#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 776192#L2872-2 assume { :end_inline_callOnFloor } true; 778412#L3212 assume { :end_inline_initPersonOnFloor } true; 777033#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 777034#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 777761#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 778780#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 778778#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 778777#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 778750#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 778751#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 778555#L1966 assume !(0 != timeShift_~tmp___9~2#1); 778557#L2057 assume !(1 == ~doorState~0); 776610#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 776611#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 775192#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 775193#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 779008#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 786451#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 786450#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 786449#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 786448#L1753 assume !(1 == ~currentHeading~0); 777679#L1763 assume !(0 == ~currentFloorID~0); 777680#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 778190#L1769-1 assume { :end_inline_continueInDirection } true; 776076#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 776077#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 776318#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 776319#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 778238#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 791718#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 791714#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 791712#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 791710#L207-2 assume !false; 791711#L208 [2021-11-23 14:07:18,664 INFO L793 eck$LassoCheckResult]: Loop: 791711#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 804048#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 804047#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 804046#L215 assume 1 != cleanup_~tmp___0~0#1; 804045#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 804044#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 804043#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 802544#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 802534#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 802533#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 802531#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 802528#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 796924#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 802527#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 802524#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 802525#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 803549#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 803545#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 802458#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 802455#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 802451#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 802452#L1968-2 assume !(0 != ~persons_0~0); 804417#L1968-3 assume !(0 != ~persons_1~0); 804411#L1982-1 assume !(0 != ~persons_2~0); 804386#L1996-1 assume !(0 != ~persons_3~0); 804381#L2010-1 assume !(0 != ~persons_4~0); 804376#L2024-1 assume !(0 != ~persons_5~0); 804372#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804371#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 804347#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804330#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 804328#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 804326#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804325#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 804302#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804282#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 804280#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 804278#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804277#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 804248#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804225#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 804223#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 804221#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804220#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 804200#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804173#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 804171#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 804169#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804168#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 804158#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804132#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 804123#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 804122#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804121#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 804115#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804080#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 804078#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 804076#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 804073#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 804066#L2844-41 assume { :end_inline_resetCallOnFloor } true; 804065#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 804062#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 804058#L1127-5 assume { :end_inline_resetFloorButton } true; 804057#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 804056#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 804055#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 804054#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 802664#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 804053#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 802635#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 804050#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 804049#L207-2 assume !false; 791711#L208 [2021-11-23 14:07:18,665 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:18,665 INFO L85 PathProgramCache]: Analyzing trace with hash -814114226, now seen corresponding path program 1 times [2021-11-23 14:07:18,666 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:18,666 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [354748090] [2021-11-23 14:07:18,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:18,666 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:18,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:18,696 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:18,697 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:18,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [354748090] [2021-11-23 14:07:18,697 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [354748090] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:18,697 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:18,697 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 14:07:18,697 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1337804006] [2021-11-23 14:07:18,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:18,698 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:18,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:18,698 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 8 times [2021-11-23 14:07:18,698 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:18,698 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1847754863] [2021-11-23 14:07:18,698 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:18,699 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:18,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:18,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:18,745 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:18,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1847754863] [2021-11-23 14:07:18,746 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1847754863] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:18,746 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:18,746 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:18,746 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [875003842] [2021-11-23 14:07:18,747 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:18,747 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:18,747 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:18,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 14:07:18,748 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 14:07:18,748 INFO L87 Difference]: Start difference. First operand 39496 states and 73067 transitions. cyclomatic complexity: 33580 Second operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:18,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:18,926 INFO L93 Difference]: Finished difference Result 39496 states and 73066 transitions. [2021-11-23 14:07:18,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 14:07:18,927 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73066 transitions. [2021-11-23 14:07:19,134 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:19,266 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73066 transitions. [2021-11-23 14:07:19,266 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-11-23 14:07:19,287 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-11-23 14:07:19,287 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73066 transitions. [2021-11-23 14:07:19,292 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:19,292 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2021-11-23 14:07:19,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73066 transitions. [2021-11-23 14:07:20,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-11-23 14:07:20,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499594895685638) internal successors, (73066), 39495 states have internal predecessors, (73066), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:20,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73066 transitions. [2021-11-23 14:07:20,316 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2021-11-23 14:07:20,316 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2021-11-23 14:07:20,316 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-11-23 14:07:20,316 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73066 transitions. [2021-11-23 14:07:20,407 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:20,407 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:20,407 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:20,409 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:20,409 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:20,409 INFO L791 eck$LassoCheckResult]: Stem: 855576#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 855577#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 857312#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 857224#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 855972#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 855544#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 855210#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 855211#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 856477#L467 assume !(0 == getOrigin_~person#1); 855704#L471 assume !(1 == getOrigin_~person#1); 855705#L475 assume !(2 == getOrigin_~person#1); 855403#L479 assume !(3 == getOrigin_~person#1); 855404#L483 assume !(4 == getOrigin_~person#1); 855532#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 856506#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 856919#L3068 assume !(0 == initPersonOnFloor_~floor#1); 855518#L3095 assume 1 == initPersonOnFloor_~floor#1; 855519#L3096 assume !(0 == initPersonOnFloor_~person#1); 857274#L3099 assume !(1 == initPersonOnFloor_~person#1); 855017#L3102 assume !(2 == initPersonOnFloor_~person#1); 855018#L3105 assume !(3 == initPersonOnFloor_~person#1); 857494#L3108 assume !(4 == initPersonOnFloor_~person#1); 857555#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 856839#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 855664#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 855201#L2872-2 assume { :end_inline_callOnFloor } true; 857408#L3212 assume { :end_inline_initPersonOnFloor } true; 856046#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 856047#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 856758#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 857755#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 857753#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 857752#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 857729#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 857730#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 857556#L1966 assume !(0 != timeShift_~tmp___9~2#1); 857558#L2057 assume !(1 == ~doorState~0); 857946#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 866079#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 866078#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 866077#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 866076#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 865810#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 865809#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 865808#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 854366#L1753 assume !(1 == ~currentHeading~0); 854367#L1763 assume !(0 == ~currentFloorID~0); 856689#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 857387#L1769-1 assume { :end_inline_continueInDirection } true; 872221#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 857138#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 855327#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 855328#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 853930#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 853931#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 853802#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 855819#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 856519#L207-2 assume !false; 872188#L208 [2021-11-23 14:07:20,410 INFO L793 eck$LassoCheckResult]: Loop: 872188#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 882226#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 882225#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 882224#L215 assume 1 != cleanup_~tmp___0~0#1; 882223#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 882222#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 882221#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 882170#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 882165#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 882164#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 882163#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 882162#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 875578#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 882161#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 882159#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 882160#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 882211#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 881491#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 881492#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 882131#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 881474#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 881475#L1968-2 assume !(0 != ~persons_0~0); 883457#L1968-3 assume !(0 != ~persons_1~0); 883451#L1982-1 assume !(0 != ~persons_2~0); 883432#L1996-1 assume !(0 != ~persons_3~0); 883427#L2010-1 assume !(0 != ~persons_4~0); 883422#L2024-1 assume !(0 != ~persons_5~0); 883418#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883412#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 883386#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 883369#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 883367#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 883365#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883364#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 883344#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 883324#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 883322#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 883320#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883319#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 883300#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 883277#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 883275#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 883273#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883272#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 883257#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 883230#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 883228#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 883226#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883225#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 883215#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 882317#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 882308#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 882303#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 882300#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 882291#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 882256#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 882254#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 882252#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 882251#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 882246#L2844-41 assume { :end_inline_resetCallOnFloor } true; 882245#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 882243#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 882239#L1127-5 assume { :end_inline_resetFloorButton } true; 882237#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 882235#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 882234#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 882232#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 881630#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 882231#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 881602#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 882228#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 882227#L207-2 assume !false; 872188#L208 [2021-11-23 14:07:20,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:20,410 INFO L85 PathProgramCache]: Analyzing trace with hash -419747440, now seen corresponding path program 1 times [2021-11-23 14:07:20,410 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:20,410 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [473331098] [2021-11-23 14:07:20,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:20,411 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:20,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:20,473 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:20,473 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:20,473 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [473331098] [2021-11-23 14:07:20,474 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [473331098] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:20,474 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:20,474 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 14:07:20,474 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845861755] [2021-11-23 14:07:20,474 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:20,475 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:20,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:20,475 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 9 times [2021-11-23 14:07:20,476 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:20,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [967430897] [2021-11-23 14:07:20,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:20,476 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:20,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:20,533 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:20,533 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:20,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [967430897] [2021-11-23 14:07:20,534 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [967430897] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:20,534 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:20,534 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:20,534 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436875738] [2021-11-23 14:07:20,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:20,535 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:20,535 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:20,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-23 14:07:20,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-23 14:07:20,536 INFO L87 Difference]: Start difference. First operand 39496 states and 73066 transitions. cyclomatic complexity: 33579 Second operand has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 7 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:20,749 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:20,749 INFO L93 Difference]: Finished difference Result 39496 states and 73065 transitions. [2021-11-23 14:07:20,750 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-23 14:07:20,750 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73065 transitions. [2021-11-23 14:07:20,886 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:20,989 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73065 transitions. [2021-11-23 14:07:20,989 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-11-23 14:07:21,008 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-11-23 14:07:21,008 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73065 transitions. [2021-11-23 14:07:21,008 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:21,009 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2021-11-23 14:07:21,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73065 transitions. [2021-11-23 14:07:21,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-11-23 14:07:21,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499341705489163) internal successors, (73065), 39495 states have internal predecessors, (73065), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:22,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73065 transitions. [2021-11-23 14:07:22,018 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2021-11-23 14:07:22,018 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2021-11-23 14:07:22,018 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-11-23 14:07:22,018 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73065 transitions. [2021-11-23 14:07:22,117 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-11-23 14:07:22,117 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:22,117 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:22,119 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:22,119 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:22,119 INFO L791 eck$LassoCheckResult]: Stem: 934590#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 934591#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 936388#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 936287#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 934989#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 934561#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 934232#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 934233#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 935501#L467 assume !(0 == getOrigin_~person#1); 934717#L471 assume !(1 == getOrigin_~person#1); 934718#L475 assume !(2 == getOrigin_~person#1); 934421#L479 assume !(3 == getOrigin_~person#1); 934422#L483 assume !(4 == getOrigin_~person#1); 934551#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 935528#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 935963#L3068 assume !(0 == initPersonOnFloor_~floor#1); 934536#L3095 assume 1 == initPersonOnFloor_~floor#1; 934537#L3096 assume !(0 == initPersonOnFloor_~person#1); 936345#L3099 assume !(1 == initPersonOnFloor_~person#1); 934039#L3102 assume !(2 == initPersonOnFloor_~person#1); 934040#L3105 assume !(3 == initPersonOnFloor_~person#1); 936565#L3108 assume !(4 == initPersonOnFloor_~person#1); 936627#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 935888#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 934678#L2860 assume !(0 == callOnFloor_~floorID#1); 934679#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 934223#L2872-2 assume { :end_inline_callOnFloor } true; 936484#L3212 assume { :end_inline_initPersonOnFloor } true; 935065#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 935066#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 935801#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 936870#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 936868#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 936867#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 936836#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 936837#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 936628#L1966 assume !(0 != timeShift_~tmp___9~2#1); 936629#L2057 assume !(1 == ~doorState~0); 937075#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 945015#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 945014#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 945013#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 945012#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 944934#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 944933#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 944931#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 944929#L1753 assume !(1 == ~currentHeading~0); 944930#L1763 assume !(0 == ~currentFloorID~0); 936847#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 938848#L1769-1 assume { :end_inline_continueInDirection } true; 949703#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 949702#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 949701#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 949699#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 949700#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 949668#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 949664#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 949662#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 949660#L207-2 assume !false; 949661#L208 [2021-11-23 14:07:22,120 INFO L793 eck$LassoCheckResult]: Loop: 949661#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 962790#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 962789#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 962788#L215 assume 1 != cleanup_~tmp___0~0#1; 962787#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 962782#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 962780#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 962764#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 962755#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 962754#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 962753#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 962752#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 953840#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 962751#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 962749#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 962746#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 962740#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 962723#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 962722#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 962720#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 962714#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 962715#L1968-2 assume !(0 != ~persons_0~0); 966574#L1968-3 assume !(0 != ~persons_1~0); 966537#L1982-1 assume !(0 != ~persons_2~0); 966511#L1996-1 assume !(0 != ~persons_3~0); 966494#L2010-1 assume !(0 != ~persons_4~0); 966486#L2024-1 assume !(0 != ~persons_5~0); 966482#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 966478#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 966451#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 966439#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 966431#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 966429#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 966426#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 966401#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 966386#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 966378#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 966305#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 966304#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 966286#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 966269#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 966265#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 966263#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 966262#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 966191#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 962938#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 962935#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 962929#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 962927#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 962916#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 962890#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 962881#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 962880#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 962879#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 962873#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 962838#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 962836#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 962834#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 962833#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 962828#L2844-41 assume { :end_inline_resetCallOnFloor } true; 962827#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 962825#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 962821#L1127-5 assume { :end_inline_resetFloorButton } true; 962818#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 962815#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 962814#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 962812#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 962810#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 962808#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 962794#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 962792#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 962791#L207-2 assume !false; 949661#L208 [2021-11-23 14:07:22,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:22,121 INFO L85 PathProgramCache]: Analyzing trace with hash -1855900741, now seen corresponding path program 1 times [2021-11-23 14:07:22,121 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:22,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [180495981] [2021-11-23 14:07:22,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:22,122 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:22,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:22,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:22,164 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:22,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [180495981] [2021-11-23 14:07:22,165 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [180495981] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:22,165 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:22,165 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 14:07:22,165 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1099396999] [2021-11-23 14:07:22,166 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:22,166 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:22,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:22,167 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 10 times [2021-11-23 14:07:22,167 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:22,167 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1457919983] [2021-11-23 14:07:22,167 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:22,168 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:22,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:22,215 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:22,216 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:22,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1457919983] [2021-11-23 14:07:22,216 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1457919983] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:22,216 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:22,216 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 14:07:22,217 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659637217] [2021-11-23 14:07:22,217 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:22,217 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:22,217 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:22,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 14:07:22,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 14:07:22,218 INFO L87 Difference]: Start difference. First operand 39496 states and 73065 transitions. cyclomatic complexity: 33578 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:22,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:22,898 INFO L93 Difference]: Finished difference Result 27702 states and 50280 transitions. [2021-11-23 14:07:22,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 14:07:22,900 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27702 states and 50280 transitions. [2021-11-23 14:07:23,006 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 14022 [2021-11-23 14:07:23,086 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27702 states to 27702 states and 50280 transitions. [2021-11-23 14:07:23,087 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18602 [2021-11-23 14:07:23,101 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18602 [2021-11-23 14:07:23,101 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27702 states and 50280 transitions. [2021-11-23 14:07:23,101 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:23,101 INFO L681 BuchiCegarLoop]: Abstraction has 27702 states and 50280 transitions. [2021-11-23 14:07:23,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27702 states and 50280 transitions. [2021-11-23 14:07:23,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27702 to 15969. [2021-11-23 14:07:23,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15969 states, 15969 states have (on average 1.8000500970630597) internal successors, (28745), 15968 states have internal predecessors, (28745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:23,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15969 states to 15969 states and 28745 transitions. [2021-11-23 14:07:23,308 INFO L704 BuchiCegarLoop]: Abstraction has 15969 states and 28745 transitions. [2021-11-23 14:07:23,308 INFO L587 BuchiCegarLoop]: Abstraction has 15969 states and 28745 transitions. [2021-11-23 14:07:23,308 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-11-23 14:07:23,308 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15969 states and 28745 transitions. [2021-11-23 14:07:23,342 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 7949 [2021-11-23 14:07:23,342 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:23,343 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:23,344 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:23,344 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:23,344 INFO L791 eck$LassoCheckResult]: Stem: 1001809#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1001810#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1003596#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1003486#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1002210#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1001779#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1001443#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1001444#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1002726#L467 assume !(0 == getOrigin_~person#1); 1001938#L471 assume !(1 == getOrigin_~person#1); 1001939#L475 assume !(2 == getOrigin_~person#1); 1001639#L479 assume !(3 == getOrigin_~person#1); 1001640#L483 assume !(4 == getOrigin_~person#1); 1001769#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1002757#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1003179#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1001754#L3095 assume 1 == initPersonOnFloor_~floor#1; 1001755#L3096 assume !(0 == initPersonOnFloor_~person#1); 1003549#L3099 assume !(1 == initPersonOnFloor_~person#1); 1001251#L3102 assume !(2 == initPersonOnFloor_~person#1); 1001252#L3105 assume !(3 == initPersonOnFloor_~person#1); 1003768#L3108 assume !(4 == initPersonOnFloor_~person#1); 1003826#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1003098#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1001893#L2860 assume !(0 == callOnFloor_~floorID#1); 1001894#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1001434#L2872-2 assume { :end_inline_callOnFloor } true; 1003685#L3212 assume { :end_inline_initPersonOnFloor } true; 1002289#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1002290#L2797 assume !(0 == isFloorCalling_~floorID#1); 1003018#L2801 assume !(1 == isFloorCalling_~floorID#1); 1001437#L2805 assume !(2 == isFloorCalling_~floorID#1); 1001297#L2809 assume !(3 == isFloorCalling_~floorID#1); 1001298#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1001732#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1001523#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1000571#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1000573#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1003510#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1003783#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1003829#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1003691#L2057 assume !(1 == ~doorState~0); 1003692#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 999984#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 999985#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1003906#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1003907#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1002418#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1002419#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1003990#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1003991#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1003368#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1000702#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1003105#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1003181#L1753 assume !(1 == ~currentHeading~0); 1004522#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1004063#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1004498#L1769-1 assume { :end_inline_continueInDirection } true; 1003668#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1004480#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1004476#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1004471#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1004463#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1004450#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1004441#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1004408#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1004387#L207-2 assume !false; 1004388#L208 [2021-11-23 14:07:23,345 INFO L793 eck$LassoCheckResult]: Loop: 1004388#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1010331#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1010330#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1010328#L215 assume 1 != cleanup_~tmp___0~0#1; 1010327#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1010326#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1010320#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1010306#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1010297#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1010135#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1010061#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1010060#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1010059#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1010058#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1010057#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1010056#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1010055#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1010054#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1010052#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1010051#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1010048#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1010045#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1010042#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1009869#L1968-2 assume !(0 != ~persons_0~0); 1011381#L1968-3 assume !(0 != ~persons_1~0); 1011375#L1982-1 assume !(0 != ~persons_2~0); 1011350#L1996-1 assume !(0 != ~persons_3~0); 1011345#L2010-1 assume !(0 != ~persons_4~0); 1011340#L2024-1 assume !(0 != ~persons_5~0); 1011336#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1011335#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1011310#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1011135#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1011110#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1011106#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1011099#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1011077#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1011063#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1011059#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1011057#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1011056#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1011034#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1011016#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1011008#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1011006#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1011005#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1010985#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010963#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1010955#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1010953#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010797#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1010737#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010706#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1010694#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1010691#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010688#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1010681#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010651#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1010560#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1010557#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1010554#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1010534#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1010530#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1010525#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1010516#L1127-5 assume { :end_inline_resetFloorButton } true; 1010494#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1010488#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1010480#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1010475#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1010473#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1010468#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1010335#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1010333#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1010332#L207-2 assume !false; 1004388#L208 [2021-11-23 14:07:23,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:23,345 INFO L85 PathProgramCache]: Analyzing trace with hash 1809966439, now seen corresponding path program 1 times [2021-11-23 14:07:23,345 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:23,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860787422] [2021-11-23 14:07:23,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:23,346 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:23,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:23,392 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:23,392 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:23,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860787422] [2021-11-23 14:07:23,393 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860787422] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:23,393 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:23,393 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-23 14:07:23,393 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [296051779] [2021-11-23 14:07:23,393 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:23,394 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:23,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:23,394 INFO L85 PathProgramCache]: Analyzing trace with hash -1832533435, now seen corresponding path program 1 times [2021-11-23 14:07:23,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:23,395 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [384487442] [2021-11-23 14:07:23,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:23,395 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:23,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:23,415 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:23,416 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:23,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [384487442] [2021-11-23 14:07:23,416 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [384487442] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:23,416 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:23,416 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:23,417 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1935360904] [2021-11-23 14:07:23,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:23,417 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:23,417 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:23,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 14:07:23,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-23 14:07:23,418 INFO L87 Difference]: Start difference. First operand 15969 states and 28745 transitions. cyclomatic complexity: 12780 Second operand has 6 states, 6 states have (on average 11.166666666666666) internal successors, (67), 5 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:25,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:25,689 INFO L93 Difference]: Finished difference Result 104406 states and 190999 transitions. [2021-11-23 14:07:25,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-23 14:07:25,690 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104406 states and 190999 transitions. [2021-11-23 14:07:26,644 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 41283 [2021-11-23 14:07:26,993 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104406 states to 104406 states and 190999 transitions. [2021-11-23 14:07:26,993 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69976 [2021-11-23 14:07:27,038 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69976 [2021-11-23 14:07:27,038 INFO L73 IsDeterministic]: Start isDeterministic. Operand 104406 states and 190999 transitions. [2021-11-23 14:07:27,039 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:27,039 INFO L681 BuchiCegarLoop]: Abstraction has 104406 states and 190999 transitions. [2021-11-23 14:07:27,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104406 states and 190999 transitions. [2021-11-23 14:07:27,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104406 to 31620. [2021-11-23 14:07:27,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31620 states, 31620 states have (on average 1.8004427577482607) internal successors, (56930), 31619 states have internal predecessors, (56930), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:27,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31620 states to 31620 states and 56930 transitions. [2021-11-23 14:07:27,602 INFO L704 BuchiCegarLoop]: Abstraction has 31620 states and 56930 transitions. [2021-11-23 14:07:27,602 INFO L587 BuchiCegarLoop]: Abstraction has 31620 states and 56930 transitions. [2021-11-23 14:07:27,602 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-11-23 14:07:27,602 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31620 states and 56930 transitions. [2021-11-23 14:07:27,677 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 15745 [2021-11-23 14:07:27,677 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:27,677 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:27,680 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:27,680 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:27,680 INFO L791 eck$LassoCheckResult]: Stem: 1122200#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1122201#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1123979#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1123878#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1122598#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1122173#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1121840#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1121841#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1123111#L467 assume !(0 == getOrigin_~person#1); 1122325#L471 assume !(1 == getOrigin_~person#1); 1122326#L475 assume !(2 == getOrigin_~person#1); 1122035#L479 assume !(3 == getOrigin_~person#1); 1122036#L483 assume !(4 == getOrigin_~person#1); 1122163#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1123140#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1123567#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1122148#L3095 assume 1 == initPersonOnFloor_~floor#1; 1122149#L3096 assume !(0 == initPersonOnFloor_~person#1); 1123939#L3099 assume !(1 == initPersonOnFloor_~person#1); 1121652#L3102 assume !(2 == initPersonOnFloor_~person#1); 1121653#L3105 assume !(3 == initPersonOnFloor_~person#1); 1124160#L3108 assume !(4 == initPersonOnFloor_~person#1); 1124232#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1123497#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1122287#L2860 assume !(0 == callOnFloor_~floorID#1); 1122288#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1121831#L2872-2 assume { :end_inline_callOnFloor } true; 1124071#L3212 assume { :end_inline_initPersonOnFloor } true; 1124072#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1123410#L2797 assume !(0 == isFloorCalling_~floorID#1); 1123411#L2801 assume !(1 == isFloorCalling_~floorID#1); 1121834#L2805 assume !(2 == isFloorCalling_~floorID#1); 1121692#L2809 assume !(3 == isFloorCalling_~floorID#1); 1121693#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1123318#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1123319#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1120973#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1120974#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1122236#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1123108#L1786-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1120960#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1125213#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1125211#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1124077#L2057 assume !(1 == ~doorState~0); 1124078#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1128914#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1128913#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1128912#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1128911#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1128910#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1128909#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1128908#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1128906#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1123757#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1121103#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1123503#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1123569#L1753 assume !(1 == ~currentHeading~0); 1129386#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1124454#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1134910#L1769-1 assume { :end_inline_continueInDirection } true; 1124052#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1135335#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1135334#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1135333#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1135332#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1135311#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1135308#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1135306#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1135297#L207-2 assume !false; 1135298#L208 [2021-11-23 14:07:27,681 INFO L793 eck$LassoCheckResult]: Loop: 1135298#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1138533#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1138525#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1138491#L215 assume 1 != cleanup_~tmp___0~0#1; 1138489#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1138488#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1138463#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1138440#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1138409#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1138406#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1137234#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1137233#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1137232#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1137231#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1137230#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1137229#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1137228#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1137227#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1137226#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1137225#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1137219#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1137194#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1137190#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1137188#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1137186#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1137185#L1968-2 assume !(0 != ~persons_0~0); 1143284#L1968-3 assume !(0 != ~persons_1~0); 1143278#L1982-1 assume !(0 != ~persons_2~0); 1143251#L1996-1 assume !(0 != ~persons_3~0); 1143246#L2010-1 assume !(0 != ~persons_4~0); 1143241#L2024-1 assume !(0 != ~persons_5~0); 1143237#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1143235#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1143213#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1143202#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1143200#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1143198#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1143197#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1143177#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1143157#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1143155#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1143153#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1143152#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1142959#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1142936#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1142934#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1142932#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1142931#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1142904#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1142881#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1142868#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1142866#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1142865#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1142854#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1142001#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1141997#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1141990#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1141989#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1138897#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1138864#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1138860#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1138858#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1138804#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1138795#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1138792#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1138788#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1138591#L1127-5 assume { :end_inline_resetFloorButton } true; 1138589#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1138588#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1138587#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1138585#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1138586#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1138563#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1138551#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1138548#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1138545#L207-2 assume !false; 1135298#L208 [2021-11-23 14:07:27,682 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:27,682 INFO L85 PathProgramCache]: Analyzing trace with hash 1772525671, now seen corresponding path program 1 times [2021-11-23 14:07:27,683 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:27,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [924162576] [2021-11-23 14:07:27,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:27,683 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:27,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:27,733 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:27,734 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:27,734 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [924162576] [2021-11-23 14:07:27,734 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [924162576] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:27,734 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:27,735 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:27,735 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1082131652] [2021-11-23 14:07:27,735 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:27,735 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:27,736 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:27,736 INFO L85 PathProgramCache]: Analyzing trace with hash -583023835, now seen corresponding path program 1 times [2021-11-23 14:07:27,736 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:27,736 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510355969] [2021-11-23 14:07:27,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:27,737 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:27,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:27,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:27,772 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:27,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510355969] [2021-11-23 14:07:27,773 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1510355969] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:27,773 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:27,773 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-23 14:07:27,773 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2039933923] [2021-11-23 14:07:27,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:27,774 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:27,774 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:27,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 14:07:27,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 14:07:27,775 INFO L87 Difference]: Start difference. First operand 31620 states and 56930 transitions. cyclomatic complexity: 25318 Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 4 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:29,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:29,516 INFO L93 Difference]: Finished difference Result 93785 states and 169257 transitions. [2021-11-23 14:07:29,516 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 14:07:29,517 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 93785 states and 169257 transitions. [2021-11-23 14:07:29,818 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 46706 [2021-11-23 14:07:30,060 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 93785 states to 93785 states and 169257 transitions. [2021-11-23 14:07:30,060 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63069 [2021-11-23 14:07:30,099 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63069 [2021-11-23 14:07:30,100 INFO L73 IsDeterministic]: Start isDeterministic. Operand 93785 states and 169257 transitions. [2021-11-23 14:07:30,100 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:30,100 INFO L681 BuchiCegarLoop]: Abstraction has 93785 states and 169257 transitions. [2021-11-23 14:07:30,147 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93785 states and 169257 transitions. [2021-11-23 14:07:31,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93785 to 31722. [2021-11-23 14:07:31,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31722 states, 31722 states have (on average 1.797868986823025) internal successors, (57032), 31721 states have internal predecessors, (57032), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:31,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31722 states to 31722 states and 57032 transitions. [2021-11-23 14:07:31,309 INFO L704 BuchiCegarLoop]: Abstraction has 31722 states and 57032 transitions. [2021-11-23 14:07:31,309 INFO L587 BuchiCegarLoop]: Abstraction has 31722 states and 57032 transitions. [2021-11-23 14:07:31,309 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-11-23 14:07:31,309 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31722 states and 57032 transitions. [2021-11-23 14:07:31,389 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 15799 [2021-11-23 14:07:31,390 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:31,390 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:31,392 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:31,392 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:31,392 INFO L791 eck$LassoCheckResult]: Stem: 1247626#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1247627#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1249412#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1249304#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1248019#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1247599#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1247261#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1247262#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1248516#L467 assume !(0 == getOrigin_~person#1); 1247750#L471 assume !(1 == getOrigin_~person#1); 1247751#L475 assume !(2 == getOrigin_~person#1); 1247460#L479 assume !(3 == getOrigin_~person#1); 1247461#L483 assume !(4 == getOrigin_~person#1); 1247589#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1248550#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1248980#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1247573#L3095 assume 1 == initPersonOnFloor_~floor#1; 1247574#L3096 assume !(0 == initPersonOnFloor_~person#1); 1249361#L3099 assume !(1 == initPersonOnFloor_~person#1); 1247073#L3102 assume !(2 == initPersonOnFloor_~person#1); 1247074#L3105 assume !(3 == initPersonOnFloor_~person#1); 1249601#L3108 assume !(4 == initPersonOnFloor_~person#1); 1249664#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1248898#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1247711#L2860 assume !(0 == callOnFloor_~floorID#1); 1247712#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1247252#L2872-2 assume { :end_inline_callOnFloor } true; 1249507#L3212 assume { :end_inline_initPersonOnFloor } true; 1249508#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1248820#L2797 assume !(0 == isFloorCalling_~floorID#1); 1248821#L2801 assume !(1 == isFloorCalling_~floorID#1); 1247255#L2805 assume !(2 == isFloorCalling_~floorID#1); 1247113#L2809 assume !(3 == isFloorCalling_~floorID#1); 1247114#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1248730#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1248731#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1246391#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1246392#L2797-2 assume !(0 == isFloorCalling_~floorID#1); 1249617#L2801-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1247802#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1249898#L1786-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1246378#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1249623#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1249666#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1249667#L2057 assume !(1 == ~doorState~0); 1247677#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1245806#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1245807#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1248442#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1248687#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1248225#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1246248#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1246249#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1249788#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1249180#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1249181#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1253613#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1253614#L1753 assume !(1 == ~currentHeading~0); 1252207#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1252204#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1252088#L1769-1 assume { :end_inline_continueInDirection } true; 1249488#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1252086#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1252084#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1252082#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1252083#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1252008#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1252002#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1252001#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1251953#L207-2 assume !false; 1251954#L208 [2021-11-23 14:07:31,393 INFO L793 eck$LassoCheckResult]: Loop: 1251954#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1263839#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1263838#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1263837#L215 assume 1 != cleanup_~tmp___0~0#1; 1263835#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1263834#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1263829#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1263788#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1263778#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1263769#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1263620#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1263619#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1263618#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1263617#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1263616#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1263615#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1263613#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1263608#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1263606#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1263605#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1263602#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1263599#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1263596#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1263594#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1263592#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1263589#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1263590#L1968-2 assume !(0 != ~persons_0~0); 1267549#L1968-3 assume !(0 != ~persons_1~0); 1267530#L1982-1 assume !(0 != ~persons_2~0); 1267517#L1996-1 assume !(0 != ~persons_3~0); 1267477#L2010-1 assume !(0 != ~persons_4~0); 1267472#L2024-1 assume !(0 != ~persons_5~0); 1267468#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1267466#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1267431#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1267414#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1267405#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1267401#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1267400#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1267375#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1267360#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1267350#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1267348#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1267347#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1266710#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266687#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1266685#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1266683#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266682#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1266331#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266310#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1266306#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1266304#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266303#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1266244#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266211#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1266203#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1266201#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266200#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1266188#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266158#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1266150#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1266148#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1266147#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1266140#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1266139#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1266137#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1266133#L1127-5 assume { :end_inline_resetFloorButton } true; 1266130#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1266129#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1264288#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1264286#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1264287#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1264152#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1264138#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1263893#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1263887#L207-2 assume !false; 1251954#L208 [2021-11-23 14:07:31,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:31,394 INFO L85 PathProgramCache]: Analyzing trace with hash 1529154201, now seen corresponding path program 1 times [2021-11-23 14:07:31,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:31,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1904732891] [2021-11-23 14:07:31,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:31,395 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:31,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:31,437 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:31,438 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:31,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1904732891] [2021-11-23 14:07:31,438 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1904732891] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:31,438 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:31,438 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 14:07:31,439 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1806657584] [2021-11-23 14:07:31,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:31,439 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:31,440 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:31,440 INFO L85 PathProgramCache]: Analyzing trace with hash 1612225554, now seen corresponding path program 1 times [2021-11-23 14:07:31,440 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:31,440 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2039161076] [2021-11-23 14:07:31,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:31,441 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:31,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:31,493 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:31,494 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:31,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2039161076] [2021-11-23 14:07:31,494 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2039161076] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:31,494 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:31,494 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 14:07:31,495 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1700892750] [2021-11-23 14:07:31,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:31,495 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:31,495 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:31,496 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 14:07:31,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 14:07:31,496 INFO L87 Difference]: Start difference. First operand 31722 states and 57032 transitions. cyclomatic complexity: 25318 Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 3 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:32,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:32,587 INFO L93 Difference]: Finished difference Result 62479 states and 112227 transitions. [2021-11-23 14:07:32,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 14:07:32,587 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62479 states and 112227 transitions. [2021-11-23 14:07:32,821 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 31546 [2021-11-23 14:07:32,986 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62479 states to 62479 states and 112227 transitions. [2021-11-23 14:07:32,986 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40123 [2021-11-23 14:07:33,012 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40123 [2021-11-23 14:07:33,012 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62479 states and 112227 transitions. [2021-11-23 14:07:33,017 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:33,017 INFO L681 BuchiCegarLoop]: Abstraction has 62479 states and 112227 transitions. [2021-11-23 14:07:33,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62479 states and 112227 transitions. [2021-11-23 14:07:34,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62479 to 36080. [2021-11-23 14:07:34,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36080 states, 36080 states have (on average 1.7754988913525498) internal successors, (64060), 36079 states have internal predecessors, (64060), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:34,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36080 states to 36080 states and 64060 transitions. [2021-11-23 14:07:34,220 INFO L704 BuchiCegarLoop]: Abstraction has 36080 states and 64060 transitions. [2021-11-23 14:07:34,220 INFO L587 BuchiCegarLoop]: Abstraction has 36080 states and 64060 transitions. [2021-11-23 14:07:34,220 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-11-23 14:07:34,221 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 36080 states and 64060 transitions. [2021-11-23 14:07:34,329 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 18244 [2021-11-23 14:07:34,329 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:34,329 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:34,331 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:34,332 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:34,335 INFO L791 eck$LassoCheckResult]: Stem: 1341749#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1341750#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1343498#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1343387#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1342109#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1341725#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1341409#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1341410#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1342603#L467 assume !(0 == getOrigin_~person#1); 1341872#L471 assume !(1 == getOrigin_~person#1); 1341873#L475 assume !(2 == getOrigin_~person#1); 1341590#L479 assume !(3 == getOrigin_~person#1); 1341591#L483 assume !(4 == getOrigin_~person#1); 1341715#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1342634#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1343064#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1341700#L3095 assume 1 == initPersonOnFloor_~floor#1; 1341701#L3096 assume !(0 == initPersonOnFloor_~person#1); 1343454#L3099 assume !(1 == initPersonOnFloor_~person#1); 1341236#L3102 assume !(2 == initPersonOnFloor_~person#1); 1341237#L3105 assume !(3 == initPersonOnFloor_~person#1); 1343688#L3108 assume !(4 == initPersonOnFloor_~person#1); 1343750#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1342986#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1341836#L2860 assume !(0 == callOnFloor_~floorID#1); 1341837#L2863 assume !(1 == callOnFloor_~floorID#1); 1341399#L2866 assume !(2 == callOnFloor_~floorID#1); 1341401#L2869 assume !(3 == callOnFloor_~floorID#1); 1342742#L2872 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1342743#L2872-2 assume { :end_inline_callOnFloor } true; 1343598#L3212 assume { :end_inline_initPersonOnFloor } true; 1342184#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1342185#L2797 assume !(0 == isFloorCalling_~floorID#1); 1342907#L2801 assume !(1 == isFloorCalling_~floorID#1); 1341403#L2805 assume !(2 == isFloorCalling_~floorID#1); 1341276#L2809 assume !(3 == isFloorCalling_~floorID#1); 1341277#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1341678#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1341481#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1341482#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1343410#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1343411#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1343705#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1343751#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1343752#L2057 assume !(1 == ~doorState~0); 1347773#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1347772#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1347771#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1347770#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1347769#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1347768#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1347767#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1347766#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1347764#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1347762#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1347761#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1347759#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1347758#L1753 assume !(1 == ~currentHeading~0); 1347756#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1347752#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1347749#L1769-1 assume { :end_inline_continueInDirection } true; 1347747#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1347748#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1347742#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1347743#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1347738#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1347739#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1350220#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1350209#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1350204#L207-2 assume !false; 1350205#L208 [2021-11-23 14:07:34,336 INFO L793 eck$LassoCheckResult]: Loop: 1350205#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1360823#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1360821#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1360561#L215 assume 1 != cleanup_~tmp___0~0#1; 1360394#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1360392#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1360390#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1360384#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1360374#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1360372#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1360344#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1360343#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1360342#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1360341#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1360340#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1360339#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1360338#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1360337#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1360335#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1360334#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1360331#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1360324#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1360320#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1360321#L1968-2 assume !(0 != ~persons_0~0); 1361787#L1968-3 assume !(0 != ~persons_1~0); 1361781#L1982-1 assume !(0 != ~persons_2~0); 1361756#L1996-1 assume !(0 != ~persons_3~0); 1361751#L2010-1 assume !(0 != ~persons_4~0); 1361746#L2024-1 assume !(0 != ~persons_5~0); 1361737#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361735#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1361704#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361687#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1361685#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1361683#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361681#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1361663#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361643#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1361641#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1361639#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361638#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1361613#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361596#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1361588#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1361585#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361584#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1361570#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361549#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1361360#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1361353#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361351#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1361089#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361063#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1361054#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1361053#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361052#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1361032#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1360997#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1360988#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1360986#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1360922#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1360907#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1360902#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1360898#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1360887#L1127-5 assume { :end_inline_resetFloorButton } true; 1360884#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1360882#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1360876#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1360874#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1360870#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1360863#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1360850#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1360843#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1360831#L207-2 assume !false; 1350205#L208 [2021-11-23 14:07:34,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:34,338 INFO L85 PathProgramCache]: Analyzing trace with hash -1232492494, now seen corresponding path program 1 times [2021-11-23 14:07:34,338 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:34,338 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [548667432] [2021-11-23 14:07:34,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:34,339 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:34,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:34,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:34,390 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:34,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [548667432] [2021-11-23 14:07:34,390 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [548667432] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:34,391 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:34,391 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-23 14:07:34,391 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1031163712] [2021-11-23 14:07:34,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:34,392 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:34,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:34,393 INFO L85 PathProgramCache]: Analyzing trace with hash -1832533435, now seen corresponding path program 2 times [2021-11-23 14:07:34,393 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:34,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317843005] [2021-11-23 14:07:34,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:34,394 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:34,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:34,421 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:34,421 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:34,422 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1317843005] [2021-11-23 14:07:34,422 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1317843005] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:34,422 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:34,422 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:34,423 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1440768215] [2021-11-23 14:07:34,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:34,424 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:34,425 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:34,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 14:07:34,426 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 14:07:34,426 INFO L87 Difference]: Start difference. First operand 36080 states and 64060 transitions. cyclomatic complexity: 27992 Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:34,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:34,560 INFO L93 Difference]: Finished difference Result 17880 states and 31744 transitions. [2021-11-23 14:07:34,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 14:07:34,561 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17880 states and 31744 transitions. [2021-11-23 14:07:34,639 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9030 [2021-11-23 14:07:34,696 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17880 states to 17880 states and 31744 transitions. [2021-11-23 14:07:34,696 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11471 [2021-11-23 14:07:34,705 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11471 [2021-11-23 14:07:34,705 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17880 states and 31744 transitions. [2021-11-23 14:07:34,706 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:34,706 INFO L681 BuchiCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2021-11-23 14:07:34,716 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17880 states and 31744 transitions. [2021-11-23 14:07:34,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17880 to 17880. [2021-11-23 14:07:34,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17880 states, 17880 states have (on average 1.7753914988814317) internal successors, (31744), 17879 states have internal predecessors, (31744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:34,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17880 states to 17880 states and 31744 transitions. [2021-11-23 14:07:34,922 INFO L704 BuchiCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2021-11-23 14:07:34,922 INFO L587 BuchiCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2021-11-23 14:07:34,922 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-11-23 14:07:34,922 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17880 states and 31744 transitions. [2021-11-23 14:07:34,968 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9030 [2021-11-23 14:07:34,968 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:34,969 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:34,971 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:34,971 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:34,972 INFO L791 eck$LassoCheckResult]: Stem: 1395666#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1395667#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1397211#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1397130#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1396002#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1395639#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1395331#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1395332#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1396455#L467 assume !(0 == getOrigin_~person#1); 1395776#L471 assume !(1 == getOrigin_~person#1); 1395777#L475 assume !(2 == getOrigin_~person#1); 1395501#L479 assume !(3 == getOrigin_~person#1); 1395502#L483 assume !(4 == getOrigin_~person#1); 1395628#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1396483#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1396857#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1395612#L3095 assume 1 == initPersonOnFloor_~floor#1; 1395613#L3096 assume !(0 == initPersonOnFloor_~person#1); 1397178#L3099 assume !(1 == initPersonOnFloor_~person#1); 1395171#L3102 assume !(2 == initPersonOnFloor_~person#1); 1395172#L3105 assume !(3 == initPersonOnFloor_~person#1); 1397354#L3108 assume !(4 == initPersonOnFloor_~person#1); 1397394#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1396789#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1395742#L2860 assume !(0 == callOnFloor_~floorID#1); 1395743#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1396710#L2872-2 assume { :end_inline_callOnFloor } true; 1397287#L3212 assume { :end_inline_initPersonOnFloor } true; 1396075#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1396076#L2797 assume !(0 == isFloorCalling_~floorID#1); 1396717#L2801 assume !(1 == isFloorCalling_~floorID#1); 1395325#L2805 assume !(2 == isFloorCalling_~floorID#1); 1395210#L2809 assume !(3 == isFloorCalling_~floorID#1); 1395211#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1395590#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1395402#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1394550#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1394551#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1395694#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1396452#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1394222#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1394223#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1394536#L1793-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1394537#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1397365#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1397395#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1397290#L2057 assume !(1 == ~doorState~0); 1395711#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1393992#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1393993#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1396386#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1396604#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1396184#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1394410#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1394411#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1397484#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1397485#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1398059#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1398058#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1394566#L1753 assume !(1 == ~currentHeading~0); 1394567#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1398077#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1398028#L1769-1 assume { :end_inline_continueInDirection } true; 1398027#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1398026#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1398025#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1398023#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1398024#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1397986#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1397982#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1397980#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1397978#L207-2 assume !false; 1397979#L208 [2021-11-23 14:07:34,972 INFO L793 eck$LassoCheckResult]: Loop: 1397979#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1406475#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1406474#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1406473#L215 assume 1 != cleanup_~tmp___0~0#1; 1406472#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1406471#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1406470#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1403120#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1403112#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1403092#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1403093#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1403086#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1403087#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1403080#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1403081#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1403074#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1403075#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1403067#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1403068#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1403059#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1403042#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1403036#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1403030#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1403028#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1403026#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1403023#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1403024#L1968-2 assume !(0 != ~persons_0~0); 1411604#L1968-3 assume !(0 != ~persons_1~0); 1411599#L1982-1 assume !(0 != ~persons_2~0); 1411585#L1996-1 assume !(0 != ~persons_3~0); 1411581#L2010-1 assume !(0 != ~persons_4~0); 1411576#L2024-1 assume !(0 != ~persons_5~0); 1411572#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1411571#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1411546#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1411535#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1403934#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1403932#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1403931#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1403906#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1403891#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1403883#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1403881#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1403880#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1403794#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1403771#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1403769#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1403767#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1403765#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1403766#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1410404#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1410402#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1410400#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1410399#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1410389#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1410363#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1410085#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1410084#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1410083#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1410078#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1410052#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1410051#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1410050#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1410049#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1410044#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1409325#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1403485#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1403482#L1127-5 assume { :end_inline_resetFloorButton } true; 1406493#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1406492#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1406491#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1406490#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1403195#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1403196#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1406478#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1406477#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1406476#L207-2 assume !false; 1397979#L208 [2021-11-23 14:07:34,973 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:34,973 INFO L85 PathProgramCache]: Analyzing trace with hash 1188656001, now seen corresponding path program 1 times [2021-11-23 14:07:34,973 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:34,973 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [679370444] [2021-11-23 14:07:34,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:34,974 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:34,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:35,017 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:35,018 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:35,018 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [679370444] [2021-11-23 14:07:35,018 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [679370444] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:35,018 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:35,019 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:35,019 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1336741386] [2021-11-23 14:07:35,019 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:35,019 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:35,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:35,020 INFO L85 PathProgramCache]: Analyzing trace with hash 1612225554, now seen corresponding path program 2 times [2021-11-23 14:07:35,020 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:35,020 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1721320848] [2021-11-23 14:07:35,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:35,021 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:35,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:35,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:35,063 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:35,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1721320848] [2021-11-23 14:07:35,064 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1721320848] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:35,064 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:35,064 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 14:07:35,064 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [732449525] [2021-11-23 14:07:35,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:35,065 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:35,065 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:35,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 14:07:35,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 14:07:35,066 INFO L87 Difference]: Start difference. First operand 17880 states and 31744 transitions. cyclomatic complexity: 13870 Second operand has 5 states, 5 states have (on average 14.4) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:36,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:36,270 INFO L93 Difference]: Finished difference Result 130551 states and 231885 transitions. [2021-11-23 14:07:36,270 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-23 14:07:36,270 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130551 states and 231885 transitions. [2021-11-23 14:07:36,798 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 68492 [2021-11-23 14:07:37,185 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130551 states to 130551 states and 231885 transitions. [2021-11-23 14:07:37,185 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 82679 [2021-11-23 14:07:37,241 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 82679 [2021-11-23 14:07:37,241 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130551 states and 231885 transitions. [2021-11-23 14:07:37,242 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:37,242 INFO L681 BuchiCegarLoop]: Abstraction has 130551 states and 231885 transitions. [2021-11-23 14:07:37,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130551 states and 231885 transitions. [2021-11-23 14:07:38,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130551 to 34535. [2021-11-23 14:07:38,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34535 states, 34535 states have (on average 1.7757347618358188) internal successors, (61325), 34534 states have internal predecessors, (61325), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:38,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34535 states to 34535 states and 61325 transitions. [2021-11-23 14:07:38,751 INFO L704 BuchiCegarLoop]: Abstraction has 34535 states and 61325 transitions. [2021-11-23 14:07:38,751 INFO L587 BuchiCegarLoop]: Abstraction has 34535 states and 61325 transitions. [2021-11-23 14:07:38,751 INFO L425 BuchiCegarLoop]: ======== Iteration 20============ [2021-11-23 14:07:38,751 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34535 states and 61325 transitions. [2021-11-23 14:07:38,826 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 17780 [2021-11-23 14:07:38,826 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:38,826 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:38,829 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:38,829 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:38,829 INFO L791 eck$LassoCheckResult]: Stem: 1544124#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1544125#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1545746#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1545663#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1544482#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1544099#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1543794#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1543795#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1544937#L467 assume !(0 == getOrigin_~person#1); 1544246#L471 assume !(1 == getOrigin_~person#1); 1544247#L475 assume !(2 == getOrigin_~person#1); 1543960#L479 assume !(3 == getOrigin_~person#1); 1543961#L483 assume !(4 == getOrigin_~person#1); 1544087#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1544973#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1545373#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1544074#L3095 assume 1 == initPersonOnFloor_~floor#1; 1544075#L3096 assume !(0 == initPersonOnFloor_~person#1); 1545713#L3099 assume !(1 == initPersonOnFloor_~person#1); 1543630#L3102 assume !(2 == initPersonOnFloor_~person#1); 1543631#L3105 assume !(3 == initPersonOnFloor_~person#1); 1545910#L3108 assume !(4 == initPersonOnFloor_~person#1); 1545961#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1545305#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1544210#L2860 assume !(0 == callOnFloor_~floorID#1); 1544211#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1545219#L2872-2 assume { :end_inline_callOnFloor } true; 1545833#L3212 assume { :end_inline_initPersonOnFloor } true; 1544557#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1544558#L2797 assume !(0 == isFloorCalling_~floorID#1); 1545229#L2801 assume !(1 == isFloorCalling_~floorID#1); 1543788#L2805 assume !(2 == isFloorCalling_~floorID#1); 1543666#L2809 assume !(3 == isFloorCalling_~floorID#1); 1543667#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1544052#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1543865#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1542996#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1542997#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1544160#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1544934#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1542669#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1542670#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1542988#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1542989#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1545924#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1545964#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1545837#L2057 assume !(1 == ~doorState~0); 1545838#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1546200#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1546199#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1546198#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1546197#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1546191#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1546189#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1546095#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1546096#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1545556#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1543117#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1545374#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1545376#L1753 assume !(1 == ~currentHeading~0); 1545155#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1545156#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1546184#L1769-1 assume { :end_inline_continueInDirection } true; 1543686#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1543687#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1543901#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1543902#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1546173#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1546174#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1548937#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1548936#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1548934#L207-2 assume !false; 1548935#L208 [2021-11-23 14:07:38,830 INFO L793 eck$LassoCheckResult]: Loop: 1548935#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1574132#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1574131#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1574129#L215 assume 1 != cleanup_~tmp___0~0#1; 1574127#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1574125#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1574123#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1574112#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1574103#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1574102#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1574101#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1574100#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1574099#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1572352#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1572350#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1572348#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1572346#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1572319#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1572320#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1573021#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1573018#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1572301#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1572302#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1573010#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1573007#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1573005#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1566844#L1968-2 assume !(0 != ~persons_0~0); 1566840#L1968-3 assume !(0 != ~persons_1~0); 1566836#L1982-1 assume !(0 != ~persons_2~0); 1564267#L1996-1 assume !(0 != ~persons_3~0); 1564263#L2010-1 assume !(0 != ~persons_4~0); 1564259#L2024-1 assume !(0 != ~persons_5~0); 1564256#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1564255#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1564232#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1564222#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1564220#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1564221#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1564724#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1564703#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1564689#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1564687#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1564685#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1564684#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1564659#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1564642#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1564640#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1564638#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1564637#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1564617#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1561530#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1561531#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1563508#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1563507#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1563498#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1563472#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1563470#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1563471#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1564150#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1564143#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1564114#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1564112#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1564113#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1575380#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1575119#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1575108#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1574167#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1560294#L1127-5 assume { :end_inline_resetFloorButton } true; 1574160#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1574157#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1574156#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1574154#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1574152#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1574150#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1574136#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1574134#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1574133#L207-2 assume !false; 1548935#L208 [2021-11-23 14:07:38,831 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:38,831 INFO L85 PathProgramCache]: Analyzing trace with hash 1211288255, now seen corresponding path program 1 times [2021-11-23 14:07:38,831 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:38,831 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2143526197] [2021-11-23 14:07:38,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:38,832 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:38,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:38,863 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:38,864 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:38,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2143526197] [2021-11-23 14:07:38,864 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2143526197] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:38,864 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:38,864 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 14:07:38,865 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1910229622] [2021-11-23 14:07:38,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:38,865 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:38,865 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:38,866 INFO L85 PathProgramCache]: Analyzing trace with hash 1612225554, now seen corresponding path program 3 times [2021-11-23 14:07:38,866 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:38,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [990899993] [2021-11-23 14:07:38,866 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:38,866 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:38,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:38,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:38,905 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:38,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [990899993] [2021-11-23 14:07:38,905 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [990899993] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:38,906 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:38,906 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 14:07:38,906 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1714998121] [2021-11-23 14:07:38,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:38,906 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:38,907 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:38,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 14:07:38,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 14:07:38,907 INFO L87 Difference]: Start difference. First operand 34535 states and 61325 transitions. cyclomatic complexity: 26796 Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 2 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:39,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:39,052 INFO L93 Difference]: Finished difference Result 27550 states and 49504 transitions. [2021-11-23 14:07:39,052 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 14:07:39,053 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27550 states and 49504 transitions. [2021-11-23 14:07:39,192 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14554 [2021-11-23 14:07:39,270 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27550 states to 27550 states and 49504 transitions. [2021-11-23 14:07:39,270 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17440 [2021-11-23 14:07:39,282 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17440 [2021-11-23 14:07:39,282 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27550 states and 49504 transitions. [2021-11-23 14:07:39,283 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:39,283 INFO L681 BuchiCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2021-11-23 14:07:39,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27550 states and 49504 transitions. [2021-11-23 14:07:39,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27550 to 27550. [2021-11-23 14:07:39,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27550 states, 27550 states have (on average 1.7968784029038112) internal successors, (49504), 27549 states have internal predecessors, (49504), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:40,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27550 states to 27550 states and 49504 transitions. [2021-11-23 14:07:40,189 INFO L704 BuchiCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2021-11-23 14:07:40,189 INFO L587 BuchiCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2021-11-23 14:07:40,189 INFO L425 BuchiCegarLoop]: ======== Iteration 21============ [2021-11-23 14:07:40,190 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27550 states and 49504 transitions. [2021-11-23 14:07:40,273 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14554 [2021-11-23 14:07:40,273 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:40,273 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:40,278 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:40,278 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:40,278 INFO L791 eck$LassoCheckResult]: Stem: 1606228#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1606229#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1607786#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1607708#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1606575#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1606204#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1605900#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1605901#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1607032#L467 assume !(0 == getOrigin_~person#1); 1606347#L471 assume !(1 == getOrigin_~person#1); 1606348#L475 assume !(2 == getOrigin_~person#1); 1606065#L479 assume !(3 == getOrigin_~person#1); 1606066#L483 assume !(4 == getOrigin_~person#1); 1606192#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1607062#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1607447#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1606179#L3095 assume 1 == initPersonOnFloor_~floor#1; 1606180#L3096 assume !(0 == initPersonOnFloor_~person#1); 1607756#L3099 assume !(1 == initPersonOnFloor_~person#1); 1605725#L3102 assume !(2 == initPersonOnFloor_~person#1); 1605726#L3105 assume !(3 == initPersonOnFloor_~person#1); 1607942#L3108 assume !(4 == initPersonOnFloor_~person#1); 1607989#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1607378#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1606312#L2860 assume !(0 == callOnFloor_~floorID#1); 1606313#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1607296#L2872-2 assume { :end_inline_callOnFloor } true; 1607869#L3212 assume { :end_inline_initPersonOnFloor } true; 1606648#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1606649#L2797 assume !(0 == isFloorCalling_~floorID#1); 1607305#L2801 assume !(1 == isFloorCalling_~floorID#1); 1605894#L2805 assume !(2 == isFloorCalling_~floorID#1); 1605766#L2809 assume !(3 == isFloorCalling_~floorID#1); 1605767#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1606158#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1605968#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1605092#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1605093#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1606264#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1607029#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1604767#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1604768#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1605084#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1605085#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1607953#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1607994#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1607873#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1606279#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1604538#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1604539#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1606964#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1607188#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1606751#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1604959#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1604960#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1608082#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1607615#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1605211#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1607389#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1605114#L1753 assume !(1 == ~currentHeading~0); 1605115#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1607238#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1607678#L1769-1 assume { :end_inline_continueInDirection } true; 1605785#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1605786#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1606005#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1606007#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1604903#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1604904#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1611281#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1611277#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1611265#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1611262#L207-2 assume !false; 1611263#L208 [2021-11-23 14:07:40,281 INFO L793 eck$LassoCheckResult]: Loop: 1611263#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1617861#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1617856#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1617854#L215 assume 1 != cleanup_~tmp___0~0#1; 1617851#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1617852#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1617835#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1617836#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1621805#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1621804#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1621803#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1621802#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1621801#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1621800#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1621799#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1621798#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1621797#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1621796#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1621795#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1621794#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1617767#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1617758#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1617771#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1621077#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1621076#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1621074#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1617735#L2057-3 assume !(1 == ~doorState~0); 1617711#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1617701#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1617692#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1617689#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1617685#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1617679#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1617676#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1617674#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1617671#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1617672#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1621498#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1621492#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1621493#L1753-3 assume !(1 == ~currentHeading~0); 1625213#L1763-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1617944#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1617562#L1769-7 assume { :end_inline_continueInDirection } true; 1623856#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623855#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1623854#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623853#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623852#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623851#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623850#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623845#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1623843#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1623842#L207-2 assume !false; 1623841#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1623840#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1623839#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1623838#L215 assume 1 != cleanup_~tmp___0~0#1; 1623837#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623832#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623830#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1623814#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1623805#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1623804#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1623803#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623802#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1623801#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1623799#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1623797#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1623796#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623795#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1623793#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1623791#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623789#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1623790#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623788#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1623774#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1623772#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1623770#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1623767#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1623765#L2057-3 assume !(1 == ~doorState~0); 1623762#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623761#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1623760#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1623759#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1623758#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1623757#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623756#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1623755#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1623754#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623697#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1623695#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1623691#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1623690#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1623688#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623687#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1623684#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1623683#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1623681#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1623680#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623677#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1623676#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1623673#L1696-3 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623650#L1144-6 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1623649#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1623647#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1623646#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1623645#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1623643#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1623642#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1623641#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1623640#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1623639#L1769-9 assume { :end_inline_continueInDirection } true; 1623638#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623637#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1623636#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623632#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1623630#L2609-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1623631#L1153-6 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1617871#L2613-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1617868#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1617866#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1617864#L207-2 assume !false; 1611263#L208 [2021-11-23 14:07:40,283 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:40,283 INFO L85 PathProgramCache]: Analyzing trace with hash 1818737528, now seen corresponding path program 1 times [2021-11-23 14:07:40,283 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:40,283 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437946844] [2021-11-23 14:07:40,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:40,284 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:40,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:40,388 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:40,389 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:40,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437946844] [2021-11-23 14:07:40,389 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [437946844] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:40,389 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:40,389 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-23 14:07:40,390 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [79668449] [2021-11-23 14:07:40,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:40,390 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:40,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:40,391 INFO L85 PathProgramCache]: Analyzing trace with hash -1545854462, now seen corresponding path program 1 times [2021-11-23 14:07:40,391 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:40,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [665057683] [2021-11-23 14:07:40,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:40,392 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:40,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:40,448 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2021-11-23 14:07:40,448 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:40,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [665057683] [2021-11-23 14:07:40,449 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [665057683] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:40,449 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:40,449 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 14:07:40,449 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [981999774] [2021-11-23 14:07:40,449 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:40,450 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:40,451 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:40,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 14:07:40,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-23 14:07:40,451 INFO L87 Difference]: Start difference. First operand 27550 states and 49504 transitions. cyclomatic complexity: 21960 Second operand has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:40,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 14:07:40,986 INFO L93 Difference]: Finished difference Result 45418 states and 82205 transitions. [2021-11-23 14:07:40,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-23 14:07:40,987 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45418 states and 82205 transitions. [2021-11-23 14:07:41,163 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 25114 [2021-11-23 14:07:41,276 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45418 states to 45418 states and 82205 transitions. [2021-11-23 14:07:41,276 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28704 [2021-11-23 14:07:41,296 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28704 [2021-11-23 14:07:41,296 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45418 states and 82205 transitions. [2021-11-23 14:07:41,296 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-23 14:07:41,296 INFO L681 BuchiCegarLoop]: Abstraction has 45418 states and 82205 transitions. [2021-11-23 14:07:41,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45418 states and 82205 transitions. [2021-11-23 14:07:41,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45418 to 27486. [2021-11-23 14:07:41,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27486 states, 27486 states have (on average 1.7964054427708651) internal successors, (49376), 27485 states have internal predecessors, (49376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 14:07:41,642 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27486 states to 27486 states and 49376 transitions. [2021-11-23 14:07:41,642 INFO L704 BuchiCegarLoop]: Abstraction has 27486 states and 49376 transitions. [2021-11-23 14:07:41,642 INFO L587 BuchiCegarLoop]: Abstraction has 27486 states and 49376 transitions. [2021-11-23 14:07:41,642 INFO L425 BuchiCegarLoop]: ======== Iteration 22============ [2021-11-23 14:07:41,643 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27486 states and 49376 transitions. [2021-11-23 14:07:41,712 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14526 [2021-11-23 14:07:41,712 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-23 14:07:41,712 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-23 14:07:41,716 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:41,716 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 14:07:41,717 INFO L791 eck$LassoCheckResult]: Stem: 1679220#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1679221#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1680836#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1680748#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1679568#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1679194#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1678888#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1678889#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1680030#L467 assume !(0 == getOrigin_~person#1); 1679336#L471 assume !(1 == getOrigin_~person#1); 1679337#L475 assume !(2 == getOrigin_~person#1); 1679059#L479 assume !(3 == getOrigin_~person#1); 1679060#L483 assume !(4 == getOrigin_~person#1); 1679184#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1680058#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1680455#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1679168#L3095 assume 1 == initPersonOnFloor_~floor#1; 1679169#L3096 assume !(0 == initPersonOnFloor_~person#1); 1680801#L3099 assume !(1 == initPersonOnFloor_~person#1); 1678716#L3102 assume !(2 == initPersonOnFloor_~person#1); 1678717#L3105 assume !(3 == initPersonOnFloor_~person#1); 1680988#L3108 assume !(4 == initPersonOnFloor_~person#1); 1681045#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1680387#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1679301#L2860 assume !(0 == callOnFloor_~floorID#1); 1679302#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1680301#L2872-2 assume { :end_inline_callOnFloor } true; 1680922#L3212 assume { :end_inline_initPersonOnFloor } true; 1679641#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1679642#L2797 assume !(0 == isFloorCalling_~floorID#1); 1680313#L2801 assume !(1 == isFloorCalling_~floorID#1); 1678882#L2805 assume !(2 == isFloorCalling_~floorID#1); 1678758#L2809 assume !(3 == isFloorCalling_~floorID#1); 1678759#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1679147#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1678957#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1678091#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1678092#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1679253#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1680026#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1677760#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1677761#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1678077#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1678078#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1681005#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1681046#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1680925#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1679269#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1677534#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1677535#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1679958#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1680183#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1679753#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1677953#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1677954#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1681152#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1678161#L1348 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1678162#L1517 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1678204#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1678205#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1680396#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1678112#L1753 assume !(1 == ~currentHeading~0); 1678113#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1680237#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1680717#L1769-1 assume { :end_inline_continueInDirection } true; 1680718#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1680663#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1680664#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1687986#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1687987#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1687988#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1678393#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1677582#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1679446#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1680071#L207-2 assume !false; 1690454#L208 [2021-11-23 14:07:41,718 INFO L793 eck$LassoCheckResult]: Loop: 1690454#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1700039#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1697953#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1696833#L215 assume 1 != cleanup_~tmp___0~0#1; 1696156#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1696154#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1696152#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1696147#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1696137#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1696114#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1696112#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1696111#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1696110#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1696109#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1696108#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1696107#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1696106#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1696105#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1696104#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1696103#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1696100#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1696097#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1696078#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1696076#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1695953#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1695949#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1695947#L2057-3 assume !(1 == ~doorState~0); 1695945#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1695944#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1695943#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1695942#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1695941#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1695940#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1695939#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1695938#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1695937#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1695934#L1348-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1695930#L1517-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1677815#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1696506#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1696504#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1696505#L1753-3 assume !(1 == ~currentHeading~0); 1700279#L1763-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1700280#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1692898#L1769-7 assume { :end_inline_continueInDirection } true; 1692849#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1692841#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1692836#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692833#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692826#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692823#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692820#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692816#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1692811#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1692801#L207-2 assume !false; 1692793#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1692787#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1692783#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1692779#L215 assume 1 != cleanup_~tmp___0~0#1; 1692739#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1692737#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1692735#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1692730#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1692595#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1692593#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1692592#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1692591#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1692590#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1692589#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1692588#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1692587#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1692586#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1692585#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1692584#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1692583#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1692580#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1692575#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1692543#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1692468#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1692469#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1692457#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1692458#L2057-3 assume !(1 == ~doorState~0); 1690679#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1690680#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1690671#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1690672#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1690663#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1690664#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1690613#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1690614#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1690653#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1690654#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1692494#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1692495#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1692480#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1692459#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1692452#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1690646#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1690647#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1690634#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1690635#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1690630#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1690631#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1690626#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1690627#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1690622#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1690623#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1690617#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1690619#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1700088#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1700076#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1700074#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1700073#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1700072#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1700071#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1700069#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1700068#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1700067#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1700066#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1700065#L1769-9 assume { :end_inline_continueInDirection } true; 1700064#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1700063#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1700062#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1700058#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1700056#L2609-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1700052#L1153-6 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1700044#L2613-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1700042#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1700041#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1700040#L207-2 assume !false; 1690454#L208 [2021-11-23 14:07:41,718 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:41,718 INFO L85 PathProgramCache]: Analyzing trace with hash -225432430, now seen corresponding path program 1 times [2021-11-23 14:07:41,718 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:41,719 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1974490377] [2021-11-23 14:07:41,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:41,719 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:41,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:41,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 14:07:41,768 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:41,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1974490377] [2021-11-23 14:07:41,769 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1974490377] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:41,769 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:41,769 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 14:07:41,769 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1278772834] [2021-11-23 14:07:41,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:41,770 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-23 14:07:41,770 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 14:07:41,771 INFO L85 PathProgramCache]: Analyzing trace with hash -1966831184, now seen corresponding path program 1 times [2021-11-23 14:07:41,771 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 14:07:41,771 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [291764390] [2021-11-23 14:07:41,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 14:07:41,771 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 14:07:41,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 14:07:41,823 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2021-11-23 14:07:41,823 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 14:07:41,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [291764390] [2021-11-23 14:07:41,823 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [291764390] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 14:07:41,824 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 14:07:41,824 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 14:07:41,824 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1482317407] [2021-11-23 14:07:41,824 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 14:07:41,825 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-23 14:07:41,825 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 14:07:41,825 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 14:07:41,825 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 14:07:41,826 INFO L87 Difference]: Start difference. First operand 27486 states and 49376 transitions. cyclomatic complexity: 21896 Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)