./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8e809cb7921b0f8738511433928ba20d09f78a0d0fe23412d97e6052fa9e13ec --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-07 00:28:54,947 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-07 00:28:54,949 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-07 00:28:54,979 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-07 00:28:54,980 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-07 00:28:54,980 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-07 00:28:54,982 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-07 00:28:54,983 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-07 00:28:54,985 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-07 00:28:54,986 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-07 00:28:54,987 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-07 00:28:54,987 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-07 00:28:54,988 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-07 00:28:54,989 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-07 00:28:54,990 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-07 00:28:54,991 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-07 00:28:54,992 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-07 00:28:54,993 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-07 00:28:54,994 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-07 00:28:54,996 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-07 00:28:54,997 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-07 00:28:54,999 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-07 00:28:55,000 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-07 00:28:55,000 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-07 00:28:55,003 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-07 00:28:55,003 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-07 00:28:55,004 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-07 00:28:55,004 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-07 00:28:55,005 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-07 00:28:55,006 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-07 00:28:55,006 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-07 00:28:55,006 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-07 00:28:55,007 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-07 00:28:55,008 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-07 00:28:55,009 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-07 00:28:55,009 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-07 00:28:55,009 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-07 00:28:55,009 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-07 00:28:55,010 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-07 00:28:55,010 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-07 00:28:55,011 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-07 00:28:55,011 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-07 00:28:55,030 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-07 00:28:55,030 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-07 00:28:55,030 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-07 00:28:55,031 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-07 00:28:55,031 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-07 00:28:55,032 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-07 00:28:55,032 INFO L138 SettingsManager]: * Use SBE=true [2021-12-07 00:28:55,032 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-07 00:28:55,032 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-07 00:28:55,032 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-07 00:28:55,032 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-07 00:28:55,032 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-07 00:28:55,032 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-07 00:28:55,033 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-07 00:28:55,033 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-07 00:28:55,033 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-07 00:28:55,033 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-07 00:28:55,033 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-07 00:28:55,033 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-07 00:28:55,033 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-07 00:28:55,033 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-07 00:28:55,033 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-07 00:28:55,034 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-07 00:28:55,034 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-07 00:28:55,034 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-07 00:28:55,034 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-07 00:28:55,034 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-07 00:28:55,034 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-07 00:28:55,034 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-07 00:28:55,034 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-07 00:28:55,034 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-07 00:28:55,035 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-07 00:28:55,035 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-07 00:28:55,035 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8e809cb7921b0f8738511433928ba20d09f78a0d0fe23412d97e6052fa9e13ec [2021-12-07 00:28:55,224 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-07 00:28:55,239 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-07 00:28:55,241 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-07 00:28:55,242 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-07 00:28:55,242 INFO L275 PluginConnector]: CDTParser initialized [2021-12-07 00:28:55,243 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c [2021-12-07 00:28:55,284 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/data/2c7360500/6f2abd046b994c3a905a34a5a2cff60d/FLAG84476da1f [2021-12-07 00:28:55,734 INFO L306 CDTParser]: Found 1 translation units. [2021-12-07 00:28:55,735 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c [2021-12-07 00:28:55,750 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/data/2c7360500/6f2abd046b994c3a905a34a5a2cff60d/FLAG84476da1f [2021-12-07 00:28:55,764 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/data/2c7360500/6f2abd046b994c3a905a34a5a2cff60d [2021-12-07 00:28:55,766 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-07 00:28:55,767 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-07 00:28:55,769 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-07 00:28:55,769 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-07 00:28:55,772 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-07 00:28:55,773 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:28:55" (1/1) ... [2021-12-07 00:28:55,774 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2cd20e79 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:55, skipping insertion in model container [2021-12-07 00:28:55,774 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:28:55" (1/1) ... [2021-12-07 00:28:55,779 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-07 00:28:55,832 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-07 00:28:55,952 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c[1545,1558] [2021-12-07 00:28:56,137 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-07 00:28:56,144 INFO L203 MainTranslator]: Completed pre-run [2021-12-07 00:28:56,153 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c[1545,1558] [2021-12-07 00:28:56,219 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-07 00:28:56,238 INFO L208 MainTranslator]: Completed translation [2021-12-07 00:28:56,239 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56 WrapperNode [2021-12-07 00:28:56,239 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-07 00:28:56,240 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-07 00:28:56,240 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-07 00:28:56,240 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-07 00:28:56,246 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,272 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,384 INFO L137 Inliner]: procedures = 93, calls = 338, calls flagged for inlining = 191, calls inlined = 282, statements flattened = 8634 [2021-12-07 00:28:56,384 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-07 00:28:56,384 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-07 00:28:56,385 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-07 00:28:56,385 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-07 00:28:56,391 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,391 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,401 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,402 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,465 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,532 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,544 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,562 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-07 00:28:56,563 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-07 00:28:56,563 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-07 00:28:56,563 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-07 00:28:56,564 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (1/1) ... [2021-12-07 00:28:56,570 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:28:56,579 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:28:56,591 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:28:56,593 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-07 00:28:56,625 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-07 00:28:56,625 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-07 00:28:56,625 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-07 00:28:56,625 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-07 00:28:56,743 INFO L236 CfgBuilder]: Building ICFG [2021-12-07 00:28:56,744 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-07 00:28:58,948 INFO L277 CfgBuilder]: Performing block encoding [2021-12-07 00:28:58,982 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-07 00:28:58,982 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-07 00:28:58,987 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:28:58 BoogieIcfgContainer [2021-12-07 00:28:58,987 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-07 00:28:58,988 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-07 00:28:58,988 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-07 00:28:58,991 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-07 00:28:58,992 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-07 00:28:58,992 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 07.12 12:28:55" (1/3) ... [2021-12-07 00:28:58,993 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3244209d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 12:28:58, skipping insertion in model container [2021-12-07 00:28:58,993 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-07 00:28:58,993 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:28:56" (2/3) ... [2021-12-07 00:28:58,994 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3244209d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 12:28:58, skipping insertion in model container [2021-12-07 00:28:58,994 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-07 00:28:58,994 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:28:58" (3/3) ... [2021-12-07 00:28:58,995 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product11.cil.c [2021-12-07 00:28:59,033 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-07 00:28:59,033 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-07 00:28:59,034 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-07 00:28:59,034 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-07 00:28:59,034 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-07 00:28:59,034 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-07 00:28:59,034 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-07 00:28:59,034 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-07 00:28:59,106 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:28:59,192 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2021-12-07 00:28:59,193 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:28:59,193 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:28:59,210 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:28:59,210 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:28:59,211 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-07 00:28:59,218 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:28:59,257 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2021-12-07 00:28:59,257 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:28:59,257 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:28:59,262 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:28:59,262 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:28:59,269 INFO L791 eck$LassoCheckResult]: Stem: 646#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2393#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1781#L3410true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1672#L3403true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 826#L3418true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 633#L408true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 499#L377true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1570#L2548true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1086#L467true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1884#L492true bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1414#L3068true assume 0 == initPersonOnFloor_~floor#1; 91#L3069true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1349#L3176-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 683#L2860true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2286#L2872-2true assume { :end_inline_callOnFloor } true; 1888#L3212true assume { :end_inline_initPersonOnFloor } true; 857#L177true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1294#L2797true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1229#L2824true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 531#L2429true stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 186#L1813true assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1693#L1144true stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 2439#L1817true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2236#L1830true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2058#L1966true assume !(0 != timeShift_~tmp___9~2#1); 1896#L2057true assume 1 == ~doorState~0;~doorState~0 := 0; 667#L2057-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 22#L2797-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 142#L2824-3true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2279#L2429-1true stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2224#L1696true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1571#L1144-1true stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1357#L1709true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1415#L2065true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 192#L1753true assume !(1 == ~currentHeading~0); 1237#L1763true assume !(0 == ~currentFloorID~0); 1852#L1763-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1651#L1769-1true assume { :end_inline_continueInDirection } true; 442#L2074-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1587#L1144-3true __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 549#L2593true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1688#L2594true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 66#L1153true __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1304#L2598true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 755#L2653true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1116#L2089true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1990#L207-2true [2021-12-07 00:28:59,271 INFO L793 eck$LassoCheckResult]: Loop: 1990#L207-2true assume !false; 922#L208true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 285#L211true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1996#L990true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1089#L215true assume 1 != cleanup_~tmp___0~0#1; 2044#L215-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 979#L2797-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2073#L2824-25true anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2345#L1252true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1087#L1316true isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2107#L1329true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1363#L227true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 272#L2797-30true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 299#L2824-30true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2266#L2429-3true stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 161#L1813-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2219#L1144-4true stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1755#L1817-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2473#L1830-1true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2210#L1966-2true assume !(0 != timeShift_~tmp___9~2#1); 835#L2057-3true assume 1 == ~doorState~0;~doorState~0 := 0; 965#L2057-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1597#L2797-33true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1722#L2824-33true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1463#L2429-4true stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2198#L1696-2true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 52#L1144-5true stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2078#L1709-2true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1365#L2065-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 413#L1753-3true assume !(1 == ~currentHeading~0); 472#L1763-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1095#L1763-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2478#L1769-7true assume { :end_inline_continueInDirection } true; 2217#L2074-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 173#L1144-7true __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 212#L2593-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1933#L2594-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 2103#L1153-5true __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1069#L2598-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 146#L2653-1true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1238#L2089-1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1990#L207-2true [2021-12-07 00:28:59,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:28:59,278 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 1 times [2021-12-07 00:28:59,287 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:28:59,288 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [567121205] [2021-12-07 00:28:59,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:28:59,289 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:28:59,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:28:59,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:28:59,513 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:28:59,514 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [567121205] [2021-12-07 00:28:59,514 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [567121205] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:28:59,515 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:28:59,515 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:28:59,516 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702476002] [2021-12-07 00:28:59,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:28:59,521 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:28:59,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:28:59,522 INFO L85 PathProgramCache]: Analyzing trace with hash -1878229724, now seen corresponding path program 1 times [2021-12-07 00:28:59,522 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:28:59,523 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1805461586] [2021-12-07 00:28:59,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:28:59,523 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:28:59,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:28:59,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:28:59,616 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:28:59,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1805461586] [2021-12-07 00:28:59,616 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1805461586] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:28:59,617 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:28:59,617 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:28:59,617 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024269834] [2021-12-07 00:28:59,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:28:59,618 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:28:59,619 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:28:59,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 00:28:59,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-07 00:28:59,663 INFO L87 Difference]: Start difference. First operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:02,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:02,158 INFO L93 Difference]: Finished difference Result 18772 states and 34781 transitions. [2021-12-07 00:29:02,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-07 00:29:02,164 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18772 states and 34781 transitions. [2021-12-07 00:29:02,337 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 8992 [2021-12-07 00:29:02,471 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18772 states to 18592 states and 34585 transitions. [2021-12-07 00:29:02,472 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18592 [2021-12-07 00:29:02,488 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18592 [2021-12-07 00:29:02,489 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18592 states and 34585 transitions. [2021-12-07 00:29:02,518 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-07 00:29:02,519 INFO L681 BuchiCegarLoop]: Abstraction has 18592 states and 34585 transitions. [2021-12-07 00:29:02,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18592 states and 34585 transitions. [2021-12-07 00:29:02,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18592 to 7054. [2021-12-07 00:29:02,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7054 states, 7054 states have (on average 1.8622058406577828) internal successors, (13136), 7053 states have internal predecessors, (13136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:02,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7054 states to 7054 states and 13136 transitions. [2021-12-07 00:29:02,762 INFO L704 BuchiCegarLoop]: Abstraction has 7054 states and 13136 transitions. [2021-12-07 00:29:02,762 INFO L587 BuchiCegarLoop]: Abstraction has 7054 states and 13136 transitions. [2021-12-07 00:29:02,762 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-07 00:29:02,762 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7054 states and 13136 transitions. [2021-12-07 00:29:02,784 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3578 [2021-12-07 00:29:02,784 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:02,784 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:02,787 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:02,787 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:02,787 INFO L791 eck$LassoCheckResult]: Stem: 22555#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 22556#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 23657#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 23598#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 22825#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 22537#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 22308#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 22309#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 23144#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 22441#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23416#L3068 assume 0 == initPersonOnFloor_~floor#1; 21517#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 21304#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 22615#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22299#L2872-2 assume { :end_inline_callOnFloor } true; 23707#L3212 assume { :end_inline_initPersonOnFloor } true; 22868#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 22869#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23275#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 22359#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 21724#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 21726#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 23609#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 23881#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 27231#L1966 assume !(0 != timeShift_~tmp___9~2#1); 27232#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 28190#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 28189#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 28188#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 28187#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 28185#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 28186#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 28194#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 28192#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 28191#L1753 assume !(1 == ~currentHeading~0); 23283#L1763 assume !(0 == ~currentFloorID~0); 23284#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23580#L1769-1 assume { :end_inline_continueInDirection } true; 22216#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 22217#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 22392#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 22393#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 21459#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 21460#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 21379#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 22723#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 26489#L207-2 [2021-12-07 00:29:02,788 INFO L793 eck$LassoCheckResult]: Loop: 26489#L207-2 assume !false; 26488#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 26487#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 26486#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 23147#L215 assume 1 != cleanup_~tmp___0~0#1; 23148#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 23021#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23022#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 26463#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 26456#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 26455#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 24028#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 24027#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23954#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 24004#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 23952#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 23951#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 23950#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 23641#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 23841#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 23842#L2057-3 assume 1 == ~doorState~0;~doorState~0 := 0; 28229#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 28228#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 28227#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 28226#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 28225#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 21423#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 21424#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 23379#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 23380#L1753-3 assume !(1 == ~currentHeading~0); 22265#L1763-9 assume !(0 == ~currentFloorID~0); 21412#L1763-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 23152#L1769-7 assume { :end_inline_continueInDirection } true; 22267#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 27349#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 27348#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 27347#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 27344#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 27338#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 27328#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 26490#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 26489#L207-2 [2021-12-07 00:29:02,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:02,788 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 2 times [2021-12-07 00:29:02,788 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:02,789 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1082662749] [2021-12-07 00:29:02,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:02,789 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:02,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:02,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:02,841 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:02,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1082662749] [2021-12-07 00:29:02,842 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1082662749] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:02,842 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:02,842 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:29:02,842 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484530406] [2021-12-07 00:29:02,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:02,843 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:02,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:02,843 INFO L85 PathProgramCache]: Analyzing trace with hash -1177165146, now seen corresponding path program 1 times [2021-12-07 00:29:02,843 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:02,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882187987] [2021-12-07 00:29:02,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:02,844 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:02,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:02,870 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:02,870 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:02,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882187987] [2021-12-07 00:29:02,871 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882187987] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:02,871 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:02,871 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:29:02,871 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [500472127] [2021-12-07 00:29:02,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:02,871 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:02,871 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:02,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 00:29:02,872 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:29:02,872 INFO L87 Difference]: Start difference. First operand 7054 states and 13136 transitions. cyclomatic complexity: 6084 Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:03,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:03,014 INFO L93 Difference]: Finished difference Result 10664 states and 19818 transitions. [2021-12-07 00:29:03,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 00:29:03,015 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10664 states and 19818 transitions. [2021-12-07 00:29:03,049 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7128 [2021-12-07 00:29:03,080 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10664 states to 10664 states and 19818 transitions. [2021-12-07 00:29:03,080 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10664 [2021-12-07 00:29:03,086 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10664 [2021-12-07 00:29:03,086 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10664 states and 19818 transitions. [2021-12-07 00:29:03,094 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-07 00:29:03,094 INFO L681 BuchiCegarLoop]: Abstraction has 10664 states and 19818 transitions. [2021-12-07 00:29:03,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10664 states and 19818 transitions. [2021-12-07 00:29:03,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10664 to 10656. [2021-12-07 00:29:03,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10656 states, 10656 states have (on average 1.8586711711711712) internal successors, (19806), 10655 states have internal predecessors, (19806), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:03,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10656 states to 10656 states and 19806 transitions. [2021-12-07 00:29:03,269 INFO L704 BuchiCegarLoop]: Abstraction has 10656 states and 19806 transitions. [2021-12-07 00:29:03,270 INFO L587 BuchiCegarLoop]: Abstraction has 10656 states and 19806 transitions. [2021-12-07 00:29:03,270 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-07 00:29:03,270 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10656 states and 19806 transitions. [2021-12-07 00:29:03,292 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7120 [2021-12-07 00:29:03,292 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:03,292 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:03,294 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:03,294 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:03,295 INFO L791 eck$LassoCheckResult]: Stem: 40282#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 40283#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 41400#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 41343#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 40552#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 40264#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 40035#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 40036#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 40876#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 40168#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 41159#L3068 assume 0 == initPersonOnFloor_~floor#1; 39242#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39032#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 40343#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 40028#L2872-2 assume { :end_inline_callOnFloor } true; 41454#L3212 assume { :end_inline_initPersonOnFloor } true; 40597#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 40598#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 41063#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 40085#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 39452#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 39454#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 41354#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 41605#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 41532#L1966 assume !(0 != timeShift_~tmp___9~2#1); 41457#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 40317#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 39071#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 39072#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 39357#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 41598#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 41272#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 39539#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 41115#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 39466#L1753 assume !(1 == ~currentHeading~0); 39467#L1763 assume !(0 == ~currentFloorID~0); 41015#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41442#L1769-1 assume { :end_inline_continueInDirection } true; 45312#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45310#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 45307#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 45306#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 45292#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 45271#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 45267#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 45265#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 45264#L207-2 [2021-12-07 00:29:03,295 INFO L793 eck$LassoCheckResult]: Loop: 45264#L207-2 assume !false; 45263#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 45262#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 45261#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 45260#L215 assume 1 != cleanup_~tmp___0~0#1; 45259#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 45249#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 45239#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 45231#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 45222#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 45221#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 45220#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 45219#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 42320#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45218#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 45217#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45215#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 45213#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39301#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 41592#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 40568#L2057-3 assume 1 == ~doorState~0;~doorState~0 := 0; 40569#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 40731#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 41292#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 41202#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 41203#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 39148#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 39149#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 41121#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 39895#L1753-3 assume !(1 == ~currentHeading~0); 39896#L1763-9 assume !(0 == ~currentFloorID~0); 39133#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 40883#L1769-7 assume { :end_inline_continueInDirection } true; 45311#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45309#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 45308#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 45305#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 45301#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 45289#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 45268#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 45266#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 45264#L207-2 [2021-12-07 00:29:03,295 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:03,296 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 3 times [2021-12-07 00:29:03,296 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:03,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2052333439] [2021-12-07 00:29:03,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:03,296 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:03,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:03,352 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:03,352 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:03,352 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2052333439] [2021-12-07 00:29:03,352 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2052333439] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:03,353 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:03,353 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:29:03,353 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2045201495] [2021-12-07 00:29:03,353 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:03,353 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:03,354 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:03,354 INFO L85 PathProgramCache]: Analyzing trace with hash -1570192156, now seen corresponding path program 1 times [2021-12-07 00:29:03,354 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:03,354 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [726606290] [2021-12-07 00:29:03,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:03,354 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:03,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:03,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:03,390 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:03,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [726606290] [2021-12-07 00:29:03,391 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [726606290] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:03,391 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:03,391 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:29:03,391 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [574952133] [2021-12-07 00:29:03,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:03,391 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:03,391 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:03,392 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 00:29:03,392 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 00:29:03,392 INFO L87 Difference]: Start difference. First operand 10656 states and 19806 transitions. cyclomatic complexity: 9152 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:03,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:03,705 INFO L93 Difference]: Finished difference Result 38585 states and 71368 transitions. [2021-12-07 00:29:03,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-07 00:29:03,706 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38585 states and 71368 transitions. [2021-12-07 00:29:03,836 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 33918 [2021-12-07 00:29:03,946 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38585 states to 38585 states and 71368 transitions. [2021-12-07 00:29:03,946 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38585 [2021-12-07 00:29:03,967 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38585 [2021-12-07 00:29:03,967 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38585 states and 71368 transitions. [2021-12-07 00:29:04,006 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-07 00:29:04,006 INFO L681 BuchiCegarLoop]: Abstraction has 38585 states and 71368 transitions. [2021-12-07 00:29:04,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38585 states and 71368 transitions. [2021-12-07 00:29:04,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38585 to 13661. [2021-12-07 00:29:04,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13661 states, 13661 states have (on average 1.8443744967425517) internal successors, (25196), 13660 states have internal predecessors, (25196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:04,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13661 states to 13661 states and 25196 transitions. [2021-12-07 00:29:04,283 INFO L704 BuchiCegarLoop]: Abstraction has 13661 states and 25196 transitions. [2021-12-07 00:29:04,283 INFO L587 BuchiCegarLoop]: Abstraction has 13661 states and 25196 transitions. [2021-12-07 00:29:04,283 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-07 00:29:04,283 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13661 states and 25196 transitions. [2021-12-07 00:29:04,334 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9188 [2021-12-07 00:29:04,334 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:04,334 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:04,336 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:04,336 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:04,336 INFO L791 eck$LassoCheckResult]: Stem: 89551#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 89552#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 90762#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 90693#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 89829#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 89532#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 89301#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 89302#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 90171#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 89437#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 90482#L3068 assume 0 == initPersonOnFloor_~floor#1; 88502#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 88292#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 89612#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 89294#L2872-2 assume { :end_inline_callOnFloor } true; 90827#L3212 assume { :end_inline_initPersonOnFloor } true; 89874#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 89875#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 90372#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 89352#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 88714#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 88716#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 90708#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 91054#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 90923#L1966 assume !(0 != timeShift_~tmp___9~2#1); 90924#L2057 assume !(1 == ~doorState~0); 91304#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 98401#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 98400#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 98395#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 90993#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 90994#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 90429#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 90430#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 91537#L1753 assume !(1 == ~currentHeading~0); 91538#L1763 assume !(0 == ~currentFloorID~0); 90809#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 90810#L1769-1 assume { :end_inline_continueInDirection } true; 98387#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 98383#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 98384#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 98380#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 98381#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 98375#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 98376#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 99486#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 99485#L207-2 [2021-12-07 00:29:04,336 INFO L793 eck$LassoCheckResult]: Loop: 99485#L207-2 assume !false; 99484#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 99483#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 99482#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 99477#L215 assume 1 != cleanup_~tmp___0~0#1; 99472#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99471#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 99460#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 99452#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 99443#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 99442#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 99437#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99435#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 93802#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 99434#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 99433#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 99432#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 99431#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 90743#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 99765#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 99763#L2057-3 assume !(1 == ~doorState~0); 99762#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99761#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 99755#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 99689#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 99652#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 99651#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 99650#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 99648#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 99649#L1753-3 assume !(1 == ~currentHeading~0); 89260#L1763-9 assume !(0 == ~currentFloorID~0); 88393#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 90178#L1769-7 assume { :end_inline_continueInDirection } true; 99040#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 98681#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 98682#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 98676#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 98677#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 98671#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 98673#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 99487#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 99485#L207-2 [2021-12-07 00:29:04,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:04,337 INFO L85 PathProgramCache]: Analyzing trace with hash -1813124867, now seen corresponding path program 1 times [2021-12-07 00:29:04,337 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:04,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1290269363] [2021-12-07 00:29:04,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:04,337 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:04,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:04,372 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:04,372 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:04,373 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1290269363] [2021-12-07 00:29:04,373 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1290269363] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:04,373 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:04,373 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:29:04,373 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2127901338] [2021-12-07 00:29:04,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:04,374 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:04,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:04,374 INFO L85 PathProgramCache]: Analyzing trace with hash -1147490330, now seen corresponding path program 1 times [2021-12-07 00:29:04,374 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:04,375 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [66853947] [2021-12-07 00:29:04,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:04,375 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:04,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:04,390 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-07 00:29:04,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:04,433 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-07 00:29:05,260 INFO L210 LassoAnalysis]: Preferences: [2021-12-07 00:29:05,261 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-07 00:29:05,261 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-07 00:29:05,261 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-07 00:29:05,261 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-07 00:29:05,261 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,261 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-07 00:29:05,261 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-07 00:29:05,261 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec2_product11.cil.c_Iteration4_Loop [2021-12-07 00:29:05,261 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-07 00:29:05,261 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-07 00:29:05,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,287 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,289 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,298 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,302 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,303 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,305 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,324 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,332 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,333 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,336 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,337 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,338 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,340 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,346 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,365 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,368 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,369 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,371 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,372 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,376 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,379 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,383 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,384 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,386 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,397 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:05,753 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-07 00:29:05,753 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-07 00:29:05,755 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,756 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:05,756 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:05,757 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-12-07 00:29:05,758 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:05,758 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:05,769 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:05,769 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret118#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret118#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:05,789 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:05,789 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,789 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:05,790 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:05,790 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-12-07 00:29:05,791 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:05,791 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:05,800 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:05,800 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret47#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret47#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:05,818 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-12-07 00:29:05,818 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,818 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:05,819 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:05,819 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-12-07 00:29:05,820 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:05,820 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:05,830 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:05,830 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret61#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret61#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:05,858 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2021-12-07 00:29:05,858 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,858 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:05,859 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:05,859 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-12-07 00:29:05,860 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:05,860 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:05,868 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:05,868 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret45#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret45#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:05,887 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:05,887 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,887 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:05,888 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:05,888 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-12-07 00:29:05,889 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:05,889 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:05,905 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:05,905 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0, ULTIMATE.start_cleanup_~tmp___0~0#1=0, ULTIMATE.start_isBlocked_#res#1=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0, ULTIMATE.start_cleanup_~tmp___0~0#1=0, ULTIMATE.start_isBlocked_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:05,924 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:05,924 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,925 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:05,925 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:05,926 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-12-07 00:29:05,927 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:05,927 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:05,937 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:05,937 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret46#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret46#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:05,967 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:05,967 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,968 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:05,968 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:05,969 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-12-07 00:29:05,970 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:05,970 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:05,978 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:05,978 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret125#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret125#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:05,996 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:05,996 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:05,996 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:05,997 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:05,998 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-12-07 00:29:05,998 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:05,998 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,007 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,007 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~17#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~17#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,025 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2021-12-07 00:29:06,025 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,025 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,026 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,027 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-12-07 00:29:06,028 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,028 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,035 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,036 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret65#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret65#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,054 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2021-12-07 00:29:06,054 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,054 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,055 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,055 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-12-07 00:29:06,056 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,056 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,064 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,064 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___1~8#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___1~8#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,082 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2021-12-07 00:29:06,082 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,083 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,083 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,084 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-12-07 00:29:06,084 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,084 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,092 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,092 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret88#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret88#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,111 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2021-12-07 00:29:06,111 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,111 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,112 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,112 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-12-07 00:29:06,113 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,113 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,121 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,121 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret87#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret87#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,139 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:06,139 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,139 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,140 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,141 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2021-12-07 00:29:06,142 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,142 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,150 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,150 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~13#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~13#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,168 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:06,168 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,168 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,169 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,170 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2021-12-07 00:29:06,170 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,170 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,178 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,178 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret127#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret127#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,196 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Ended with exit code 0 [2021-12-07 00:29:06,196 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,196 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,197 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,197 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2021-12-07 00:29:06,198 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,198 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,206 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,206 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret126#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret126#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,224 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2021-12-07 00:29:06,224 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,224 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,225 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,225 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2021-12-07 00:29:06,226 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,226 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,238 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,239 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,257 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2021-12-07 00:29:06,257 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,257 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,258 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,259 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2021-12-07 00:29:06,259 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,259 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,275 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,275 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Honda state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,293 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Ended with exit code 0 [2021-12-07 00:29:06,294 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,294 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,295 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,296 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2021-12-07 00:29:06,297 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,297 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,312 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,312 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_areDoorsOpen_#res#1=4, ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___4~3#1=4, ~doorState~0=4, ULTIMATE.start_areDoorsOpen_~retValue_acc~10#1=4} Honda state: {ULTIMATE.start_areDoorsOpen_#res#1=4, ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___4~3#1=4, ~doorState~0=4, ULTIMATE.start_areDoorsOpen_~retValue_acc~10#1=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,330 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Ended with exit code 0 [2021-12-07 00:29:06,331 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,331 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,331 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,332 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2021-12-07 00:29:06,333 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,333 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,340 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,340 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,358 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Ended with exit code 0 [2021-12-07 00:29:06,359 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,359 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,359 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,360 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2021-12-07 00:29:06,360 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,361 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,368 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,368 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___2~6#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___2~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,387 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:06,387 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,387 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,388 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,388 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2021-12-07 00:29:06,389 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,389 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,396 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-07 00:29:06,396 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret67#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret67#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-07 00:29:06,414 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2021-12-07 00:29:06,414 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,415 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,415 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,416 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2021-12-07 00:29:06,416 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-07 00:29:06,417 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:06,444 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:06,444 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:06,445 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:06,445 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:06,446 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2021-12-07 00:29:06,447 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-07 00:29:06,447 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-07 00:29:07,660 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-07 00:29:07,663 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2021-12-07 00:29:07,663 INFO L210 LassoAnalysis]: Preferences: [2021-12-07 00:29:07,663 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-07 00:29:07,663 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-07 00:29:07,663 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-07 00:29:07,663 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-07 00:29:07,664 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:07,664 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-07 00:29:07,664 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-07 00:29:07,664 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec2_product11.cil.c_Iteration4_Loop [2021-12-07 00:29:07,664 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-07 00:29:07,664 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-07 00:29:07,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,669 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,670 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,676 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,677 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,678 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,679 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,680 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,682 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,683 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,684 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,685 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,687 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,692 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,700 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,712 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,718 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,722 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,729 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,735 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,739 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,740 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,742 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,743 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:07,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-07 00:29:08,122 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-07 00:29:08,125 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-07 00:29:08,126 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,126 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,126 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,127 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2021-12-07 00:29:08,128 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,135 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,135 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,135 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,135 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,135 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,137 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,137 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,138 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,166 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Ended with exit code 0 [2021-12-07 00:29:08,166 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,166 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,167 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,168 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2021-12-07 00:29:08,168 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,175 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,175 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,175 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,175 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,175 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,176 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,176 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,177 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,195 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Ended with exit code 0 [2021-12-07 00:29:08,195 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,195 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,196 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,197 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2021-12-07 00:29:08,197 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,204 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,204 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,204 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,204 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,205 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,205 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,205 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,206 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,224 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2021-12-07 00:29:08,224 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,224 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,225 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,225 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2021-12-07 00:29:08,226 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,233 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,233 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,233 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,233 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2021-12-07 00:29:08,233 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,237 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2021-12-07 00:29:08,237 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,242 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,260 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2021-12-07 00:29:08,260 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,261 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,261 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,262 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2021-12-07 00:29:08,262 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,269 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,270 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,270 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,270 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,270 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,271 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,271 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,272 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,290 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Ended with exit code 0 [2021-12-07 00:29:08,290 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,290 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,291 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,292 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2021-12-07 00:29:08,293 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,300 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,300 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,300 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,300 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,300 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,301 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,301 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,302 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,320 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:08,320 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,320 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,321 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,321 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2021-12-07 00:29:08,322 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,329 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,329 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,329 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,329 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,329 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,330 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,330 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,331 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,349 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Ended with exit code 0 [2021-12-07 00:29:08,349 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,349 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,350 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,350 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2021-12-07 00:29:08,351 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,358 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,358 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,358 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,358 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,358 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,358 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,358 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,360 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,377 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2021-12-07 00:29:08,378 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,378 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,378 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,379 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2021-12-07 00:29:08,379 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,387 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,387 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,387 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,387 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,387 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,388 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,388 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,389 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,407 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2021-12-07 00:29:08,408 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,408 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,408 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,409 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2021-12-07 00:29:08,410 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,417 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,417 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,417 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,417 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,417 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,418 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,418 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,419 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,436 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:08,437 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,437 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,437 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,438 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2021-12-07 00:29:08,439 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,446 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,446 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,446 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,446 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,446 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,446 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,446 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,447 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,465 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2021-12-07 00:29:08,465 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,466 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,466 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,467 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2021-12-07 00:29:08,468 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,475 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,475 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,475 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,475 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,475 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,476 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,476 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,477 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,495 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Ended with exit code 0 [2021-12-07 00:29:08,495 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,495 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,496 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,497 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2021-12-07 00:29:08,497 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,504 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,505 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,505 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,505 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,505 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,506 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,506 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,507 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,525 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Ended with exit code 0 [2021-12-07 00:29:08,525 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,526 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,526 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,527 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2021-12-07 00:29:08,528 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,535 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,535 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,536 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,536 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2021-12-07 00:29:08,536 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,538 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2021-12-07 00:29:08,538 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,541 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-07 00:29:08,559 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:08,559 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,559 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,559 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,560 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2021-12-07 00:29:08,560 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-07 00:29:08,568 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-07 00:29:08,568 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-07 00:29:08,568 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-07 00:29:08,569 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-07 00:29:08,569 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-07 00:29:08,570 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-07 00:29:08,570 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-07 00:29:08,573 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-07 00:29:08,577 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2021-12-07 00:29:08,577 INFO L444 ModelExtractionUtils]: 7 out of 9 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-07 00:29:08,578 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-07 00:29:08,578 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:29:08,580 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-07 00:29:08,581 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2021-12-07 00:29:08,581 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-07 00:29:08,581 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-07 00:29:08,581 INFO L513 LassoAnalysis]: Proved termination. [2021-12-07 00:29:08,582 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2021-12-07 00:29:08,600 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Forceful destruction successful, exit code 0 [2021-12-07 00:29:08,602 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-07 00:29:08,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:08,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:08,665 INFO L263 TraceCheckSpWp]: Trace formula consists of 600 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-07 00:29:08,667 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-07 00:29:08,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:08,741 INFO L263 TraceCheckSpWp]: Trace formula consists of 154 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-07 00:29:08,743 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-07 00:29:08,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:08,926 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2021-12-07 00:29:08,927 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 13661 states and 25196 transitions. cyclomatic complexity: 11537 Second operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:09,524 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f03bea73-78dd-4f0d-888e-017e7448bb12/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Ended with exit code 0 [2021-12-07 00:29:09,887 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 13661 states and 25196 transitions. cyclomatic complexity: 11537. Second operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 40138 states and 74108 transitions. Complement of second has 11 states. [2021-12-07 00:29:09,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 6 states 1 stem states 4 non-accepting loop states 1 accepting loop states [2021-12-07 00:29:09,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:09,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 6736 transitions. [2021-12-07 00:29:09,897 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 46 letters. Loop has 41 letters. [2021-12-07 00:29:09,899 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-07 00:29:09,899 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 87 letters. Loop has 41 letters. [2021-12-07 00:29:09,900 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-07 00:29:09,900 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 46 letters. Loop has 82 letters. [2021-12-07 00:29:09,903 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-07 00:29:09,903 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40138 states and 74108 transitions. [2021-12-07 00:29:10,083 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20337 [2021-12-07 00:29:10,246 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40138 states to 40138 states and 74108 transitions. [2021-12-07 00:29:10,246 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26597 [2021-12-07 00:29:10,268 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26998 [2021-12-07 00:29:10,268 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40138 states and 74108 transitions. [2021-12-07 00:29:10,268 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:10,268 INFO L681 BuchiCegarLoop]: Abstraction has 40138 states and 74108 transitions. [2021-12-07 00:29:10,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40138 states and 74108 transitions. [2021-12-07 00:29:10,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40138 to 39523. [2021-12-07 00:29:10,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39523 states, 39523 states have (on average 1.8504162133441286) internal successors, (73134), 39522 states have internal predecessors, (73134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:10,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39523 states to 39523 states and 73134 transitions. [2021-12-07 00:29:10,784 INFO L704 BuchiCegarLoop]: Abstraction has 39523 states and 73134 transitions. [2021-12-07 00:29:10,784 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:10,785 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 00:29:10,785 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:29:10,785 INFO L87 Difference]: Start difference. First operand 39523 states and 73134 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:10,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:10,949 INFO L93 Difference]: Finished difference Result 39523 states and 73128 transitions. [2021-12-07 00:29:10,950 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 00:29:10,950 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39523 states and 73128 transitions. [2021-12-07 00:29:11,081 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:11,184 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39523 states to 39523 states and 73128 transitions. [2021-12-07 00:29:11,184 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26429 [2021-12-07 00:29:11,222 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26429 [2021-12-07 00:29:11,223 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39523 states and 73128 transitions. [2021-12-07 00:29:11,231 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:11,231 INFO L681 BuchiCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2021-12-07 00:29:11,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39523 states and 73128 transitions. [2021-12-07 00:29:11,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39523 to 39523. [2021-12-07 00:29:11,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39523 states, 39523 states have (on average 1.8502644030058446) internal successors, (73128), 39522 states have internal predecessors, (73128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:11,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39523 states to 39523 states and 73128 transitions. [2021-12-07 00:29:11,700 INFO L704 BuchiCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2021-12-07 00:29:11,700 INFO L587 BuchiCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2021-12-07 00:29:11,700 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-07 00:29:11,700 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39523 states and 73128 transitions. [2021-12-07 00:29:11,775 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:11,775 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:11,776 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:11,777 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:11,778 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:11,778 INFO L791 eck$LassoCheckResult]: Stem: 223322#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 223323#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 225084#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 224987#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 223724#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 223291#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 222958#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 222959#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 224225#L467 assume !(0 == getOrigin_~person#1); 223452#L471 assume !(1 == getOrigin_~person#1); 223453#L475 assume !(2 == getOrigin_~person#1); 223150#L479 assume !(3 == getOrigin_~person#1); 223151#L483 assume !(4 == getOrigin_~person#1); 223281#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 224251#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 224680#L3068 assume 0 == initPersonOnFloor_~floor#1; 221758#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 221440#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 223413#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 222949#L2872-2 assume { :end_inline_callOnFloor } true; 225189#L3212 assume { :end_inline_initPersonOnFloor } true; 223798#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 223799#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 224421#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 224422#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 222093#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 222095#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 225536#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 225453#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 225454#L1966 assume !(0 != timeShift_~tmp___9~2#1); 225194#L2057 assume !(1 == ~doorState~0); 225195#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 221502#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 221503#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 225833#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 225834#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 233645#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 233644#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 233643#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 222115#L1753 assume !(1 == ~currentHeading~0); 222116#L1763 assume !(0 == ~currentFloorID~0); 225162#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 225163#L1769-1 assume { :end_inline_continueInDirection } true; 222828#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 222829#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 223078#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 223079#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 221676#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 221677#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 221549#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 223569#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 224264#L207-2 assume !false; 240006#L208 [2021-12-07 00:29:11,778 INFO L793 eck$LassoCheckResult]: Loop: 240006#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 250526#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 250525#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 250524#L215 assume 1 != cleanup_~tmp___0~0#1; 250523#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250522#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 250521#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 250500#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 250491#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 250486#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 250484#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250483#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 240497#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 250482#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 250479#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250480#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 250485#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 250465#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 250466#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 251101#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 251100#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 249898#L1968-2 assume !(0 != ~persons_0~0); 260767#L1968-3 assume !(0 != ~persons_1~0); 260761#L1982-1 assume !(0 != ~persons_2~0); 260741#L1996-1 assume !(0 != ~persons_3~0); 260737#L2010-1 assume !(0 != ~persons_4~0); 260732#L2024-1 assume !(0 != ~persons_5~0); 260728#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260727#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 260702#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 260685#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 260683#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 260681#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260680#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 260660#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 260646#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 260574#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 260393#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260392#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 260373#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 260350#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 260348#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 260346#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260344#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 260335#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 260311#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 260308#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 260306#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 260305#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 225004#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 221621#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 224169#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 224170#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 224458#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 222661#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 221428#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 223420#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 222433#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 254754#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 254749#L2844-41 assume { :end_inline_resetCallOnFloor } true; 254748#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 254745#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 250575#L1127-5 assume { :end_inline_resetFloorButton } true; 250571#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 250568#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 250565#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 250564#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 250563#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 250546#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 250536#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 250530#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 250527#L207-2 assume !false; 240006#L208 [2021-12-07 00:29:11,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:11,779 INFO L85 PathProgramCache]: Analyzing trace with hash -1486397763, now seen corresponding path program 1 times [2021-12-07 00:29:11,779 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:11,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927705495] [2021-12-07 00:29:11,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:11,779 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:11,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:11,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:11,828 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:11,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927705495] [2021-12-07 00:29:11,828 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1927705495] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:11,828 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:11,828 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 00:29:11,828 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641976556] [2021-12-07 00:29:11,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:11,829 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:11,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:11,829 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 1 times [2021-12-07 00:29:11,829 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:11,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1256371622] [2021-12-07 00:29:11,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:11,829 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:11,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:11,864 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:11,864 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:11,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1256371622] [2021-12-07 00:29:11,864 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1256371622] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:11,864 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:11,864 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:11,865 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [213596177] [2021-12-07 00:29:11,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:11,865 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:11,865 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:11,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:29:11,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:29:11,866 INFO L87 Difference]: Start difference. First operand 39523 states and 73128 transitions. cyclomatic complexity: 33614 Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 6 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:12,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:12,099 INFO L93 Difference]: Finished difference Result 39517 states and 73115 transitions. [2021-12-07 00:29:12,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-07 00:29:12,101 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73115 transitions. [2021-12-07 00:29:12,213 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:12,302 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73115 transitions. [2021-12-07 00:29:12,303 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2021-12-07 00:29:12,317 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2021-12-07 00:29:12,317 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73115 transitions. [2021-12-07 00:29:12,318 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:12,318 INFO L681 BuchiCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2021-12-07 00:29:12,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73115 transitions. [2021-12-07 00:29:12,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2021-12-07 00:29:12,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.850216362578131) internal successors, (73115), 39516 states have internal predecessors, (73115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:12,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73115 transitions. [2021-12-07 00:29:12,703 INFO L704 BuchiCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2021-12-07 00:29:12,703 INFO L587 BuchiCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2021-12-07 00:29:12,703 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-07 00:29:12,703 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73115 transitions. [2021-12-07 00:29:12,786 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:12,786 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:12,786 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:12,787 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:12,788 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:12,788 INFO L791 eck$LassoCheckResult]: Stem: 302380#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 302381#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 304093#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 303996#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 302773#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 302355#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 302019#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 302020#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 303272#L467 assume !(0 == getOrigin_~person#1); 302506#L471 assume !(1 == getOrigin_~person#1); 302507#L475 assume !(2 == getOrigin_~person#1); 302213#L479 assume !(3 == getOrigin_~person#1); 302214#L483 assume !(4 == getOrigin_~person#1); 302340#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 303296#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 303703#L3068 assume !(0 == initPersonOnFloor_~floor#1); 302323#L3095 assume 1 == initPersonOnFloor_~floor#1; 302324#L3096 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 300502#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 302466#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 302010#L2872-2 assume { :end_inline_callOnFloor } true; 304191#L3212 assume { :end_inline_initPersonOnFloor } true; 302852#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 302853#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 303463#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 303464#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 301151#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 301153#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 304496#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 304434#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 304435#L1966 assume !(0 != timeShift_~tmp___9~2#1); 304196#L2057 assume !(1 == ~doorState~0); 304197#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 312956#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 312955#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 312954#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 304419#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 304420#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 306249#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 306246#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 306248#L1753 assume !(1 == ~currentHeading~0); 312218#L1763 assume !(0 == ~currentFloorID~0); 304507#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 311994#L1769-1 assume { :end_inline_continueInDirection } true; 318879#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 318878#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 318877#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 318875#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 318876#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 318859#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 318846#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 318844#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 318840#L207-2 assume !false; 318841#L208 [2021-12-07 00:29:12,788 INFO L793 eck$LassoCheckResult]: Loop: 318841#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 328465#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 328459#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 328449#L215 assume 1 != cleanup_~tmp___0~0#1; 328437#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 328395#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 328360#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 328349#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 328339#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 328337#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 328336#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 328334#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 320842#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 328331#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 328328#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 328307#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 328292#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 328281#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 328275#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 328272#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 328269#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 328270#L1968-2 assume !(0 != ~persons_0~0); 335515#L1968-3 assume !(0 != ~persons_1~0); 335509#L1982-1 assume !(0 != ~persons_2~0); 335478#L1996-1 assume !(0 != ~persons_3~0); 335473#L2010-1 assume !(0 != ~persons_4~0); 335468#L2024-1 assume !(0 != ~persons_5~0); 335464#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335462#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 335374#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335357#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 335355#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 335353#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335352#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 335329#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335309#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 335307#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 335305#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335303#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 335284#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335261#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 335259#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 335257#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335256#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 335231#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335204#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 335202#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 335200#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335198#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 335192#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335166#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 335157#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 335156#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335155#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 335149#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335114#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 335112#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 335110#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 335109#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 335104#L2844-41 assume { :end_inline_resetCallOnFloor } true; 335103#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 335101#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 335097#L1127-5 assume { :end_inline_resetFloorButton } true; 335096#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 335093#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 335090#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 335087#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 335086#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 335084#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 335074#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 335073#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 335071#L207-2 assume !false; 318841#L208 [2021-12-07 00:29:12,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:12,788 INFO L85 PathProgramCache]: Analyzing trace with hash 743878906, now seen corresponding path program 1 times [2021-12-07 00:29:12,789 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:12,789 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [755874074] [2021-12-07 00:29:12,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:12,789 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:12,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:12,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:12,817 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:12,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [755874074] [2021-12-07 00:29:12,817 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [755874074] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:12,818 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:12,818 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:12,818 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [27392434] [2021-12-07 00:29:12,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:12,818 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:12,818 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:12,818 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 2 times [2021-12-07 00:29:12,818 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:12,818 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982630892] [2021-12-07 00:29:12,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:12,819 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:12,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:12,853 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:12,854 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:12,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982630892] [2021-12-07 00:29:12,854 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982630892] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:12,854 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:12,854 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:12,854 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427417336] [2021-12-07 00:29:12,854 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:12,854 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:12,854 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:12,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:12,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:12,855 INFO L87 Difference]: Start difference. First operand 39517 states and 73115 transitions. cyclomatic complexity: 33607 Second operand has 4 states, 4 states have (on average 13.25) internal successors, (53), 4 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:13,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:13,076 INFO L93 Difference]: Finished difference Result 39517 states and 73111 transitions. [2021-12-07 00:29:13,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-07 00:29:13,078 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73111 transitions. [2021-12-07 00:29:13,219 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:13,317 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73111 transitions. [2021-12-07 00:29:13,318 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2021-12-07 00:29:13,332 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2021-12-07 00:29:13,332 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73111 transitions. [2021-12-07 00:29:13,333 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:13,333 INFO L681 BuchiCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2021-12-07 00:29:13,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73111 transitions. [2021-12-07 00:29:13,643 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2021-12-07 00:29:13,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8501151403193563) internal successors, (73111), 39516 states have internal predecessors, (73111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:13,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73111 transitions. [2021-12-07 00:29:13,756 INFO L704 BuchiCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2021-12-07 00:29:13,756 INFO L587 BuchiCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2021-12-07 00:29:13,756 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-07 00:29:13,756 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73111 transitions. [2021-12-07 00:29:13,853 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:13,853 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:13,853 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:13,854 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:13,854 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:13,855 INFO L791 eck$LassoCheckResult]: Stem: 381422#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 381423#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 383141#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 383046#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 381818#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 381395#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 381067#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 381068#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 382310#L467 assume !(0 == getOrigin_~person#1); 381547#L471 assume !(1 == getOrigin_~person#1); 381548#L475 assume !(2 == getOrigin_~person#1); 381254#L479 assume !(3 == getOrigin_~person#1); 381255#L483 assume !(4 == getOrigin_~person#1); 381383#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 382342#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 382749#L3068 assume !(0 == initPersonOnFloor_~floor#1); 381369#L3095 assume 1 == initPersonOnFloor_~floor#1; 381370#L3096 assume !(0 == initPersonOnFloor_~person#1); 383103#L3099 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 379545#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 381509#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 381054#L2872-2 assume { :end_inline_callOnFloor } true; 383235#L3212 assume { :end_inline_initPersonOnFloor } true; 381893#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 381894#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 382507#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 382508#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 380195#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 380197#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 383559#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 383560#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 383368#L1966 assume !(0 != timeShift_~tmp___9~2#1); 383370#L2057 assume !(1 == ~doorState~0); 381473#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 381474#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 380054#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 380055#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 383481#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 383482#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 385313#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 385311#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 380218#L1753 assume !(1 == ~currentHeading~0); 380219#L1763 assume !(0 == ~currentFloorID~0); 383568#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 391055#L1769-1 assume { :end_inline_continueInDirection } true; 397607#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 397606#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 397605#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 397604#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 397603#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 397598#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 397595#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 397594#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 397592#L207-2 assume !false; 397593#L208 [2021-12-07 00:29:13,855 INFO L793 eck$LassoCheckResult]: Loop: 397593#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 410073#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 410072#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 410071#L215 assume 1 != cleanup_~tmp___0~0#1; 410070#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 410069#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 410068#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 410052#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 410043#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 410042#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 410041#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 410040#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 400191#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 410039#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 410038#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 408039#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 408034#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 408013#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 408014#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 408961#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 408959#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 408960#L1968-2 assume !(0 != ~persons_0~0); 410426#L1968-3 assume !(0 != ~persons_1~0); 410420#L1982-1 assume !(0 != ~persons_2~0); 410395#L1996-1 assume !(0 != ~persons_3~0); 410390#L2010-1 assume !(0 != ~persons_4~0); 410385#L2024-1 assume !(0 != ~persons_5~0); 410381#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410380#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 410355#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410338#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 410336#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 410334#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410333#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 410313#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410293#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 410291#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 410289#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410288#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 410269#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410246#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 410244#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 410242#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410241#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 410226#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410199#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 410197#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 410195#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410194#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 410184#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410158#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 410149#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 410148#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 410147#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 410141#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 410106#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 410104#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 410102#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 410101#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 410096#L2844-41 assume { :end_inline_resetCallOnFloor } true; 410095#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 410090#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 410086#L1127-5 assume { :end_inline_resetFloorButton } true; 410085#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 410084#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 410083#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 410082#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 408320#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 410081#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 408104#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 410075#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 410074#L207-2 assume !false; 397593#L208 [2021-12-07 00:29:13,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:13,855 INFO L85 PathProgramCache]: Analyzing trace with hash -1651182822, now seen corresponding path program 1 times [2021-12-07 00:29:13,856 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:13,856 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448627633] [2021-12-07 00:29:13,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:13,856 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:13,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:13,885 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:13,885 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:13,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448627633] [2021-12-07 00:29:13,886 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448627633] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:13,886 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:13,886 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:13,886 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [949382479] [2021-12-07 00:29:13,886 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:13,886 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:13,886 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:13,887 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 3 times [2021-12-07 00:29:13,887 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:13,887 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485885058] [2021-12-07 00:29:13,887 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:13,887 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:13,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:13,922 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:13,922 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:13,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485885058] [2021-12-07 00:29:13,922 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485885058] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:13,922 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:13,922 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:13,922 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1055138868] [2021-12-07 00:29:13,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:13,923 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:13,923 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:13,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:13,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:13,923 INFO L87 Difference]: Start difference. First operand 39517 states and 73111 transitions. cyclomatic complexity: 33603 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:14,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:14,185 INFO L93 Difference]: Finished difference Result 39517 states and 73107 transitions. [2021-12-07 00:29:14,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-07 00:29:14,192 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73107 transitions. [2021-12-07 00:29:14,297 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:14,378 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73107 transitions. [2021-12-07 00:29:14,378 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2021-12-07 00:29:14,390 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2021-12-07 00:29:14,391 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73107 transitions. [2021-12-07 00:29:14,392 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:14,392 INFO L681 BuchiCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2021-12-07 00:29:14,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73107 transitions. [2021-12-07 00:29:14,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2021-12-07 00:29:14,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8500139180605815) internal successors, (73107), 39516 states have internal predecessors, (73107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:14,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73107 transitions. [2021-12-07 00:29:14,730 INFO L704 BuchiCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2021-12-07 00:29:14,730 INFO L587 BuchiCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2021-12-07 00:29:14,730 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-07 00:29:14,730 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73107 transitions. [2021-12-07 00:29:14,812 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:14,812 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:14,812 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:14,814 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:14,814 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:14,814 INFO L791 eck$LassoCheckResult]: Stem: 460481#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 460482#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 462222#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 462123#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 460877#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 460452#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 460122#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 460123#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 461375#L467 assume !(0 == getOrigin_~person#1); 460609#L471 assume !(1 == getOrigin_~person#1); 460610#L475 assume !(2 == getOrigin_~person#1); 460310#L479 assume !(3 == getOrigin_~person#1); 460311#L483 assume !(4 == getOrigin_~person#1); 460440#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 461406#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 461825#L3068 assume !(0 == initPersonOnFloor_~floor#1); 460426#L3095 assume 1 == initPersonOnFloor_~floor#1; 460427#L3096 assume !(0 == initPersonOnFloor_~person#1); 462178#L3099 assume !(1 == initPersonOnFloor_~person#1); 459932#L3102 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 458594#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 460571#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 460109#L2872-2 assume { :end_inline_callOnFloor } true; 462318#L3212 assume { :end_inline_initPersonOnFloor } true; 460953#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 460954#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 461575#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 461576#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 459246#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 459248#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 462674#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 462675#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 462471#L1966 assume !(0 != timeShift_~tmp___9~2#1); 462473#L2057 assume !(1 == ~doorState~0); 464179#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 471920#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 471919#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 471918#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 471917#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 471861#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 471860#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 471859#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 459269#L1753 assume !(1 == ~currentHeading~0); 459270#L1763 assume !(0 == ~currentFloorID~0); 461587#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 462091#L1769-1 assume { :end_inline_continueInDirection } true; 459996#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 459997#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 460240#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 460241#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 475865#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 475851#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 475848#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 475846#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 475844#L207-2 assume !false; 475845#L208 [2021-12-07 00:29:14,814 INFO L793 eck$LassoCheckResult]: Loop: 475845#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 487050#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 487049#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 487048#L215 assume 1 != cleanup_~tmp___0~0#1; 487047#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 487046#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 487045#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 487001#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 486992#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 486991#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 486990#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 486989#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 478940#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 486988#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 486430#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 486403#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 486387#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 486374#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 486375#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 486364#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 486359#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 486360#L1968-2 assume !(0 != ~persons_0~0); 488483#L1968-3 assume !(0 != ~persons_1~0); 488477#L1982-1 assume !(0 != ~persons_2~0); 488452#L1996-1 assume !(0 != ~persons_3~0); 488447#L2010-1 assume !(0 != ~persons_4~0); 488442#L2024-1 assume !(0 != ~persons_5~0); 488438#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488437#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 488412#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488395#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 488393#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 488391#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488390#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 488370#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488350#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 488348#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 488346#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488345#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 488326#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488303#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 488301#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 488299#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488298#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 488283#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488256#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 488254#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 488252#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488251#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 488181#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 488149#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 488146#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 488145#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 488143#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 487864#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 487815#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 487793#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 487790#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 487758#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 487071#L2844-41 assume { :end_inline_resetCallOnFloor } true; 487069#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 487067#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 487063#L1127-5 assume { :end_inline_resetFloorButton } true; 487062#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 487061#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 487060#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 487059#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 486578#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 487058#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 486540#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 487052#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 487051#L207-2 assume !false; 475845#L208 [2021-12-07 00:29:14,815 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:14,815 INFO L85 PathProgramCache]: Analyzing trace with hash -1722085675, now seen corresponding path program 1 times [2021-12-07 00:29:14,815 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:14,815 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [438645416] [2021-12-07 00:29:14,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:14,815 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:14,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:14,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:14,841 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:14,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [438645416] [2021-12-07 00:29:14,841 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [438645416] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:14,841 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:14,841 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:14,841 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [310085991] [2021-12-07 00:29:14,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:14,842 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:14,842 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:14,842 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 4 times [2021-12-07 00:29:14,842 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:14,842 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [172786204] [2021-12-07 00:29:14,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:14,842 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:14,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:14,873 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:14,874 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:14,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [172786204] [2021-12-07 00:29:14,874 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [172786204] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:14,874 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:14,874 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:14,874 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442887717] [2021-12-07 00:29:14,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:14,874 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:14,875 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:14,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:14,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:14,875 INFO L87 Difference]: Start difference. First operand 39517 states and 73107 transitions. cyclomatic complexity: 33599 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:15,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:15,008 INFO L93 Difference]: Finished difference Result 39517 states and 73103 transitions. [2021-12-07 00:29:15,008 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-07 00:29:15,009 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73103 transitions. [2021-12-07 00:29:15,151 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:15,364 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73103 transitions. [2021-12-07 00:29:15,365 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2021-12-07 00:29:15,377 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2021-12-07 00:29:15,377 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73103 transitions. [2021-12-07 00:29:15,377 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:15,377 INFO L681 BuchiCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2021-12-07 00:29:15,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73103 transitions. [2021-12-07 00:29:15,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2021-12-07 00:29:15,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8499126958018068) internal successors, (73103), 39516 states have internal predecessors, (73103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:15,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73103 transitions. [2021-12-07 00:29:15,703 INFO L704 BuchiCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2021-12-07 00:29:15,703 INFO L587 BuchiCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2021-12-07 00:29:15,703 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-07 00:29:15,703 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73103 transitions. [2021-12-07 00:29:15,785 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:15,785 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:15,786 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:15,787 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:15,787 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:15,787 INFO L791 eck$LassoCheckResult]: Stem: 539523#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 539524#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 541241#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 541147#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 539915#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 539494#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 539164#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 539165#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 540408#L467 assume !(0 == getOrigin_~person#1); 539649#L471 assume !(1 == getOrigin_~person#1); 539650#L475 assume !(2 == getOrigin_~person#1); 539355#L479 assume !(3 == getOrigin_~person#1); 539356#L483 assume !(4 == getOrigin_~person#1); 539484#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 540432#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 540847#L3068 assume !(0 == initPersonOnFloor_~floor#1); 539467#L3095 assume !(1 == initPersonOnFloor_~floor#1); 539469#L3122 assume !(2 == initPersonOnFloor_~floor#1); 540726#L3149 assume !(3 == initPersonOnFloor_~floor#1); 541617#L3176 assume !(4 == initPersonOnFloor_~floor#1); 537649#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 539610#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 539155#L2872-2 assume { :end_inline_callOnFloor } true; 541334#L3212 assume { :end_inline_initPersonOnFloor } true; 539989#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 539990#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 540600#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 540601#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 538300#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 538302#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 541650#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 541583#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 541584#L1966 assume !(0 != timeShift_~tmp___9~2#1); 541339#L2057 assume !(1 == ~doorState~0); 539575#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 537711#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 537712#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 543401#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 541571#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 541572#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 540773#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 540774#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 538323#L1753 assume !(1 == ~currentHeading~0); 538324#L1763 assume !(0 == ~currentFloorID~0); 540615#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 541116#L1769-1 assume { :end_inline_continueInDirection } true; 539037#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 539038#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 539282#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 539283#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 537887#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 537888#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 537759#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 539763#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 540445#L207-2 assume !false; 556455#L208 [2021-12-07 00:29:15,787 INFO L793 eck$LassoCheckResult]: Loop: 556455#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 566630#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 566629#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 566628#L215 assume 1 != cleanup_~tmp___0~0#1; 566627#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 566626#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 566625#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 565529#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 565519#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 565517#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 565516#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 565514#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 558040#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 565507#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 565504#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 565505#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 567225#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 567209#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 567207#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 567204#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 567200#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 567201#L1968-2 assume !(0 != ~persons_0~0); 574714#L1968-3 assume !(0 != ~persons_1~0); 574708#L1982-1 assume !(0 != ~persons_2~0); 574683#L1996-1 assume !(0 != ~persons_3~0); 574678#L2010-1 assume !(0 != ~persons_4~0); 574673#L2024-1 assume !(0 != ~persons_5~0); 574669#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 574668#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 574643#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 574626#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 574624#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 574622#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 574621#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 573796#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 573776#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 573774#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 573772#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 573771#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 573752#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 573729#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 573727#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 573725#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 573724#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 573643#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 573617#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 573614#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 573611#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 573609#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 573603#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 573577#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 573513#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 573256#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 568873#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 568614#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 568578#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 568568#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 568565#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 568564#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 568559#L2844-41 assume { :end_inline_resetCallOnFloor } true; 568558#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 566650#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 566646#L1127-5 assume { :end_inline_resetFloorButton } true; 566644#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 566642#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 566641#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 566639#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 565621#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 566638#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 565588#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 566632#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 566631#L207-2 assume !false; 556455#L208 [2021-12-07 00:29:15,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:15,788 INFO L85 PathProgramCache]: Analyzing trace with hash 1107673685, now seen corresponding path program 1 times [2021-12-07 00:29:15,788 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:15,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1764128545] [2021-12-07 00:29:15,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:15,788 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:15,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:15,818 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:15,818 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:15,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1764128545] [2021-12-07 00:29:15,819 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1764128545] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:15,819 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:15,819 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:15,819 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1752946769] [2021-12-07 00:29:15,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:15,819 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:15,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:15,820 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 5 times [2021-12-07 00:29:15,820 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:15,820 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [858153738] [2021-12-07 00:29:15,820 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:15,820 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:15,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:15,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:15,856 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:15,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [858153738] [2021-12-07 00:29:15,857 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [858153738] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:15,857 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:15,857 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:15,857 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2020551480] [2021-12-07 00:29:15,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:15,857 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:15,857 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:15,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:15,858 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:15,858 INFO L87 Difference]: Start difference. First operand 39517 states and 73103 transitions. cyclomatic complexity: 33595 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:15,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:15,972 INFO L93 Difference]: Finished difference Result 39496 states and 73069 transitions. [2021-12-07 00:29:15,973 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-07 00:29:15,973 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73069 transitions. [2021-12-07 00:29:16,095 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:16,192 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73069 transitions. [2021-12-07 00:29:16,192 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-12-07 00:29:16,208 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-12-07 00:29:16,209 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73069 transitions. [2021-12-07 00:29:16,209 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:16,209 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2021-12-07 00:29:16,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73069 transitions. [2021-12-07 00:29:16,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-12-07 00:29:16,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8500354466275066) internal successors, (73069), 39495 states have internal predecessors, (73069), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:16,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73069 transitions. [2021-12-07 00:29:16,651 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2021-12-07 00:29:16,651 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2021-12-07 00:29:16,652 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-07 00:29:16,652 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73069 transitions. [2021-12-07 00:29:16,735 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:16,735 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:16,735 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:16,736 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:16,736 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:16,737 INFO L791 eck$LassoCheckResult]: Stem: 618543#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 618544#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 620265#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 620172#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 618942#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 618515#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 618181#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 618182#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 619436#L467 assume !(0 == getOrigin_~person#1); 618672#L471 assume !(1 == getOrigin_~person#1); 618673#L475 assume !(2 == getOrigin_~person#1); 618378#L479 assume !(3 == getOrigin_~person#1); 618379#L483 assume !(4 == getOrigin_~person#1); 618505#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 619461#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 619875#L3068 assume !(0 == initPersonOnFloor_~floor#1); 618490#L3095 assume 1 == initPersonOnFloor_~floor#1; 618491#L3096 assume !(0 == initPersonOnFloor_~person#1); 620224#L3099 assume !(1 == initPersonOnFloor_~person#1); 617995#L3102 assume !(2 == initPersonOnFloor_~person#1); 617996#L3105 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 619803#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 618632#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 618172#L2872-2 assume { :end_inline_callOnFloor } true; 620354#L3212 assume { :end_inline_initPersonOnFloor } true; 619017#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 619018#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 619720#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 620678#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 620676#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 620675#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 620654#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 620655#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 620485#L1966 assume !(0 != timeShift_~tmp___9~2#1); 620486#L2057 assume !(1 == ~doorState~0); 620902#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 626969#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 626968#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 626967#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 626966#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 620062#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 617452#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 619809#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 617347#L1753 assume !(1 == ~currentHeading~0); 617348#L1763 assume !(0 == ~currentFloorID~0); 620661#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 627184#L1769-1 assume { :end_inline_continueInDirection } true; 633481#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 633480#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 633479#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 633477#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 633478#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 633476#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 616784#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 618790#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 633441#L207-2 assume !false; 633442#L208 [2021-12-07 00:29:16,737 INFO L793 eck$LassoCheckResult]: Loop: 633442#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 645953#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 645952#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 645951#L215 assume 1 != cleanup_~tmp___0~0#1; 645950#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 645945#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 645943#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 645927#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 645918#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 645917#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 645916#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 645915#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 637296#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 645914#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 645908#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 645906#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 645898#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 645890#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 645889#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 645887#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 645886#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 645442#L1968-2 assume !(0 != ~persons_0~0); 647291#L1968-3 assume !(0 != ~persons_1~0); 647285#L1982-1 assume !(0 != ~persons_2~0); 647260#L1996-1 assume !(0 != ~persons_3~0); 647255#L2010-1 assume !(0 != ~persons_4~0); 647250#L2024-1 assume !(0 != ~persons_5~0); 647246#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647245#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 647220#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647203#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 647201#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 647199#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647198#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 647178#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647158#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 647156#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 647154#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647153#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 647134#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647111#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 647109#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 647107#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647106#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 647091#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647064#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 647062#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 647060#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647059#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 647049#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 647023#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 647014#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 647013#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 647012#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 646036#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 646001#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 645999#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 645997#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 645996#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 645991#L2844-41 assume { :end_inline_resetCallOnFloor } true; 645990#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 645988#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 645984#L1127-5 assume { :end_inline_resetFloorButton } true; 645981#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 645978#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 645977#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 645975#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 645973#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 645971#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 645957#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 645955#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 645954#L207-2 assume !false; 633442#L208 [2021-12-07 00:29:16,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:16,737 INFO L85 PathProgramCache]: Analyzing trace with hash 1536459861, now seen corresponding path program 1 times [2021-12-07 00:29:16,737 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:16,737 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [921756542] [2021-12-07 00:29:16,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:16,738 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:16,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:16,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:16,761 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:16,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [921756542] [2021-12-07 00:29:16,761 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [921756542] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:16,761 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:16,762 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:16,762 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [789283506] [2021-12-07 00:29:16,762 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:16,762 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:16,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:16,762 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 6 times [2021-12-07 00:29:16,762 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:16,762 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [701111600] [2021-12-07 00:29:16,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:16,762 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:16,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:16,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:16,792 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:16,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [701111600] [2021-12-07 00:29:16,792 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [701111600] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:16,792 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:16,792 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:16,792 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238796245] [2021-12-07 00:29:16,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:16,792 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:16,793 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:16,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:16,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:16,793 INFO L87 Difference]: Start difference. First operand 39496 states and 73069 transitions. cyclomatic complexity: 33582 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:16,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:16,919 INFO L93 Difference]: Finished difference Result 39496 states and 73068 transitions. [2021-12-07 00:29:16,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-07 00:29:16,920 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73068 transitions. [2021-12-07 00:29:17,039 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:17,134 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73068 transitions. [2021-12-07 00:29:17,135 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-12-07 00:29:17,151 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-12-07 00:29:17,151 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73068 transitions. [2021-12-07 00:29:17,153 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:17,153 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2021-12-07 00:29:17,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73068 transitions. [2021-12-07 00:29:17,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-12-07 00:29:17,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.850010127607859) internal successors, (73068), 39495 states have internal predecessors, (73068), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:17,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73068 transitions. [2021-12-07 00:29:17,688 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2021-12-07 00:29:17,688 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2021-12-07 00:29:17,688 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-07 00:29:17,688 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73068 transitions. [2021-12-07 00:29:17,785 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:17,785 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:17,785 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:17,787 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:17,787 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:17,787 INFO L791 eck$LassoCheckResult]: Stem: 697557#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 697558#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 699294#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 699204#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 697959#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 697530#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 697197#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 697198#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 698461#L467 assume !(0 == getOrigin_~person#1); 697689#L471 assume !(1 == getOrigin_~person#1); 697690#L475 assume !(2 == getOrigin_~person#1); 697387#L479 assume !(3 == getOrigin_~person#1); 697388#L483 assume !(4 == getOrigin_~person#1); 697518#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 698489#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 698912#L3068 assume !(0 == initPersonOnFloor_~floor#1); 697504#L3095 assume 1 == initPersonOnFloor_~floor#1; 697505#L3096 assume !(0 == initPersonOnFloor_~person#1); 699256#L3099 assume !(1 == initPersonOnFloor_~person#1); 697009#L3102 assume !(2 == initPersonOnFloor_~person#1); 697010#L3105 assume !(3 == initPersonOnFloor_~person#1); 699466#L3108 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 698834#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 697648#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 697184#L2872-2 assume { :end_inline_callOnFloor } true; 699390#L3212 assume { :end_inline_initPersonOnFloor } true; 698033#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 698034#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 698749#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 699734#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 699732#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 699731#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 699712#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 699713#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 699520#L1966 assume !(0 != timeShift_~tmp___9~2#1); 699522#L2057 assume !(1 == ~doorState~0); 699960#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 707605#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 707604#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 707603#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 707601#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 701552#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 701551#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 698913#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 696348#L1753 assume !(1 == ~currentHeading~0); 696349#L1763 assume !(0 == ~currentFloorID~0); 698668#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 699175#L1769-1 assume { :end_inline_continueInDirection } true; 697067#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 697068#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 697313#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 697314#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 699221#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 713228#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 713214#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 698503#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 698504#L207-2 assume !false; 714435#L208 [2021-12-07 00:29:17,788 INFO L793 eck$LassoCheckResult]: Loop: 714435#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 728206#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 728205#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 728204#L215 assume 1 != cleanup_~tmp___0~0#1; 728203#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 728198#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 728196#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 728190#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 728181#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 728180#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 728179#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 728178#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 716762#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 728173#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 728170#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 728169#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 728164#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 728155#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 728153#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 728151#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 724398#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 723915#L1968-2 assume !(0 != ~persons_0~0); 732963#L1968-3 assume !(0 != ~persons_1~0); 732942#L1982-1 assume !(0 != ~persons_2~0); 732918#L1996-1 assume !(0 != ~persons_3~0); 732906#L2010-1 assume !(0 != ~persons_4~0); 732899#L2024-1 assume !(0 != ~persons_5~0); 732895#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732893#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 732864#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732852#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 732844#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 732842#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732841#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 732700#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732680#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 732678#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 732676#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732675#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 732592#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732575#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 732571#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 732569#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732568#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 732550#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732528#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 732520#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 732516#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732515#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 729146#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 729120#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 728303#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 728302#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 728301#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 728290#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 728255#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 728253#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 728251#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 728250#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 728245#L2844-41 assume { :end_inline_resetCallOnFloor } true; 728244#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 728242#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 728238#L1127-5 assume { :end_inline_resetFloorButton } true; 728237#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 728236#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 728235#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 728228#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 728226#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 728224#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 728210#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 728208#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 728207#L207-2 assume !false; 714435#L208 [2021-12-07 00:29:17,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:17,788 INFO L85 PathProgramCache]: Analyzing trace with hash 633723056, now seen corresponding path program 1 times [2021-12-07 00:29:17,788 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:17,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [753880123] [2021-12-07 00:29:17,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:17,788 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:17,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:17,814 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:17,814 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:17,814 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [753880123] [2021-12-07 00:29:17,814 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [753880123] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:17,814 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:17,814 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:17,815 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1122184455] [2021-12-07 00:29:17,815 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:17,815 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:17,815 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:17,815 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 7 times [2021-12-07 00:29:17,815 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:17,815 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [193993210] [2021-12-07 00:29:17,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:17,816 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:17,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:17,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:17,848 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:17,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [193993210] [2021-12-07 00:29:17,849 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [193993210] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:17,849 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:17,849 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:17,849 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338610069] [2021-12-07 00:29:17,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:17,849 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:17,850 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:17,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:17,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:17,850 INFO L87 Difference]: Start difference. First operand 39496 states and 73068 transitions. cyclomatic complexity: 33581 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:18,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:18,004 INFO L93 Difference]: Finished difference Result 39496 states and 73067 transitions. [2021-12-07 00:29:18,005 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-07 00:29:18,005 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73067 transitions. [2021-12-07 00:29:18,153 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:18,265 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73067 transitions. [2021-12-07 00:29:18,266 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-12-07 00:29:18,284 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-12-07 00:29:18,284 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73067 transitions. [2021-12-07 00:29:18,286 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:18,286 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2021-12-07 00:29:18,305 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73067 transitions. [2021-12-07 00:29:18,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-12-07 00:29:18,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499848085882116) internal successors, (73067), 39495 states have internal predecessors, (73067), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:18,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73067 transitions. [2021-12-07 00:29:18,777 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2021-12-07 00:29:18,777 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2021-12-07 00:29:18,777 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-07 00:29:18,777 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73067 transitions. [2021-12-07 00:29:18,859 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:18,860 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:18,860 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:18,861 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:18,861 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:18,861 INFO L791 eck$LassoCheckResult]: Stem: 776558#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 776559#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 778310#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 778222#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 776957#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 776531#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 776205#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 776206#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 777459#L467 assume !(0 == getOrigin_~person#1); 776686#L471 assume !(1 == getOrigin_~person#1); 776687#L475 assume !(2 == getOrigin_~person#1); 776391#L479 assume !(3 == getOrigin_~person#1); 776392#L483 assume !(4 == getOrigin_~person#1); 776519#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 777493#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 777920#L3068 assume !(0 == initPersonOnFloor_~floor#1); 776506#L3095 assume 1 == initPersonOnFloor_~floor#1; 776507#L3096 assume !(0 == initPersonOnFloor_~person#1); 778273#L3099 assume !(1 == initPersonOnFloor_~person#1); 776019#L3102 assume !(2 == initPersonOnFloor_~person#1); 776020#L3105 assume !(3 == initPersonOnFloor_~person#1); 778488#L3108 assume !(4 == initPersonOnFloor_~person#1); 778552#L3111 assume !(5 == initPersonOnFloor_~person#1); 777846#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 776646#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 776192#L2872-2 assume { :end_inline_callOnFloor } true; 778412#L3212 assume { :end_inline_initPersonOnFloor } true; 777033#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 777034#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 777761#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 778780#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 778778#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 778777#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 778750#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 778751#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 778555#L1966 assume !(0 != timeShift_~tmp___9~2#1); 778557#L2057 assume !(1 == ~doorState~0); 776610#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 776611#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 775192#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 775193#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 779008#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 786451#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 786450#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 786449#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 786448#L1753 assume !(1 == ~currentHeading~0); 777679#L1763 assume !(0 == ~currentFloorID~0); 777680#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 778190#L1769-1 assume { :end_inline_continueInDirection } true; 776076#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 776077#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 776318#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 776319#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 778238#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 791718#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 791714#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 791712#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 791710#L207-2 assume !false; 791711#L208 [2021-12-07 00:29:18,861 INFO L793 eck$LassoCheckResult]: Loop: 791711#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 804048#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 804047#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 804046#L215 assume 1 != cleanup_~tmp___0~0#1; 804045#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 804044#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 804043#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 802544#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 802534#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 802533#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 802531#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 802528#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 796924#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 802527#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 802524#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 802525#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 803549#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 803545#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 802458#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 802455#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 802451#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 802452#L1968-2 assume !(0 != ~persons_0~0); 804417#L1968-3 assume !(0 != ~persons_1~0); 804411#L1982-1 assume !(0 != ~persons_2~0); 804386#L1996-1 assume !(0 != ~persons_3~0); 804381#L2010-1 assume !(0 != ~persons_4~0); 804376#L2024-1 assume !(0 != ~persons_5~0); 804372#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804371#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 804347#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804330#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 804328#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 804326#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804325#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 804302#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804282#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 804280#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 804278#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804277#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 804248#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804225#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 804223#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 804221#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804220#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 804200#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804173#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 804171#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 804169#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804168#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 804158#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804132#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 804123#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 804122#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804121#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 804115#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804080#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 804078#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 804076#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 804073#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 804066#L2844-41 assume { :end_inline_resetCallOnFloor } true; 804065#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 804062#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 804058#L1127-5 assume { :end_inline_resetFloorButton } true; 804057#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 804056#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 804055#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 804054#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 802664#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 804053#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 802635#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 804050#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 804049#L207-2 assume !false; 791711#L208 [2021-12-07 00:29:18,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:18,862 INFO L85 PathProgramCache]: Analyzing trace with hash -814114226, now seen corresponding path program 1 times [2021-12-07 00:29:18,862 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:18,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326248130] [2021-12-07 00:29:18,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:18,862 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:18,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:18,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:18,882 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:18,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326248130] [2021-12-07 00:29:18,882 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326248130] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:18,882 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:18,882 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:29:18,883 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [327446692] [2021-12-07 00:29:18,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:18,883 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:18,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:18,883 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 8 times [2021-12-07 00:29:18,883 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:18,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1995850244] [2021-12-07 00:29:18,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:18,883 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:18,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:18,914 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:18,914 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:18,914 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1995850244] [2021-12-07 00:29:18,914 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1995850244] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:18,914 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:18,914 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:18,914 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [786713362] [2021-12-07 00:29:18,914 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:18,914 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:18,914 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:18,915 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 00:29:18,915 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:29:18,915 INFO L87 Difference]: Start difference. First operand 39496 states and 73067 transitions. cyclomatic complexity: 33580 Second operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:19,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:19,019 INFO L93 Difference]: Finished difference Result 39496 states and 73066 transitions. [2021-12-07 00:29:19,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 00:29:19,020 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73066 transitions. [2021-12-07 00:29:19,140 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:19,238 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73066 transitions. [2021-12-07 00:29:19,238 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-12-07 00:29:19,254 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-12-07 00:29:19,254 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73066 transitions. [2021-12-07 00:29:19,256 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:19,256 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2021-12-07 00:29:19,273 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73066 transitions. [2021-12-07 00:29:19,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-12-07 00:29:19,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499594895685638) internal successors, (73066), 39495 states have internal predecessors, (73066), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:19,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73066 transitions. [2021-12-07 00:29:19,748 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2021-12-07 00:29:19,748 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2021-12-07 00:29:19,748 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-12-07 00:29:19,748 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73066 transitions. [2021-12-07 00:29:19,821 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:19,821 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:19,821 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:19,822 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:19,822 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:19,822 INFO L791 eck$LassoCheckResult]: Stem: 855576#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 855577#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 857312#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 857224#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 855972#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 855544#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 855210#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 855211#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 856477#L467 assume !(0 == getOrigin_~person#1); 855704#L471 assume !(1 == getOrigin_~person#1); 855705#L475 assume !(2 == getOrigin_~person#1); 855403#L479 assume !(3 == getOrigin_~person#1); 855404#L483 assume !(4 == getOrigin_~person#1); 855532#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 856506#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 856919#L3068 assume !(0 == initPersonOnFloor_~floor#1); 855518#L3095 assume 1 == initPersonOnFloor_~floor#1; 855519#L3096 assume !(0 == initPersonOnFloor_~person#1); 857274#L3099 assume !(1 == initPersonOnFloor_~person#1); 855017#L3102 assume !(2 == initPersonOnFloor_~person#1); 855018#L3105 assume !(3 == initPersonOnFloor_~person#1); 857494#L3108 assume !(4 == initPersonOnFloor_~person#1); 857555#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 856839#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 855664#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 855201#L2872-2 assume { :end_inline_callOnFloor } true; 857408#L3212 assume { :end_inline_initPersonOnFloor } true; 856046#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 856047#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 856758#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 857755#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 857753#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 857752#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 857729#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 857730#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 857556#L1966 assume !(0 != timeShift_~tmp___9~2#1); 857558#L2057 assume !(1 == ~doorState~0); 857946#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 866079#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 866078#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 866077#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 866076#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 865810#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 865809#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 865808#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 854366#L1753 assume !(1 == ~currentHeading~0); 854367#L1763 assume !(0 == ~currentFloorID~0); 856689#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 857387#L1769-1 assume { :end_inline_continueInDirection } true; 872221#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 857138#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 855327#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 855328#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 853930#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 853931#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 853802#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 855819#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 856519#L207-2 assume !false; 872188#L208 [2021-12-07 00:29:19,823 INFO L793 eck$LassoCheckResult]: Loop: 872188#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 882226#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 882225#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 882224#L215 assume 1 != cleanup_~tmp___0~0#1; 882223#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 882222#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 882221#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 882170#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 882165#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 882164#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 882163#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 882162#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 875578#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 882161#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 882159#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 882160#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 882211#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 881491#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 881492#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 882131#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 881474#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 881475#L1968-2 assume !(0 != ~persons_0~0); 883457#L1968-3 assume !(0 != ~persons_1~0); 883451#L1982-1 assume !(0 != ~persons_2~0); 883432#L1996-1 assume !(0 != ~persons_3~0); 883427#L2010-1 assume !(0 != ~persons_4~0); 883422#L2024-1 assume !(0 != ~persons_5~0); 883418#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883412#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 883386#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 883369#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 883367#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 883365#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883364#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 883344#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 883324#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 883322#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 883320#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883319#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 883300#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 883277#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 883275#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 883273#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883272#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 883257#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 883230#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 883228#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 883226#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 883225#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 883215#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 882317#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 882308#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 882303#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 882300#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 882291#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 882256#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 882254#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 882252#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 882251#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 882246#L2844-41 assume { :end_inline_resetCallOnFloor } true; 882245#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 882243#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 882239#L1127-5 assume { :end_inline_resetFloorButton } true; 882237#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 882235#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 882234#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 882232#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 881630#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 882231#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 881602#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 882228#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 882227#L207-2 assume !false; 872188#L208 [2021-12-07 00:29:19,823 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:19,823 INFO L85 PathProgramCache]: Analyzing trace with hash -419747440, now seen corresponding path program 1 times [2021-12-07 00:29:19,823 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:19,823 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1968404983] [2021-12-07 00:29:19,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:19,824 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:19,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:19,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:19,856 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:19,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1968404983] [2021-12-07 00:29:19,856 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1968404983] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:19,856 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:19,856 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:19,856 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [999002435] [2021-12-07 00:29:19,856 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:19,856 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:19,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:19,857 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 9 times [2021-12-07 00:29:19,857 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:19,857 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2035795803] [2021-12-07 00:29:19,857 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:19,857 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:19,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:19,887 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:19,887 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:19,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2035795803] [2021-12-07 00:29:19,887 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2035795803] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:19,887 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:19,887 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:19,887 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [572971233] [2021-12-07 00:29:19,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:19,888 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:19,888 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:19,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 00:29:19,888 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-07 00:29:19,888 INFO L87 Difference]: Start difference. First operand 39496 states and 73066 transitions. cyclomatic complexity: 33579 Second operand has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 7 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:20,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:20,045 INFO L93 Difference]: Finished difference Result 39496 states and 73065 transitions. [2021-12-07 00:29:20,045 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-07 00:29:20,046 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73065 transitions. [2021-12-07 00:29:20,169 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:20,266 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73065 transitions. [2021-12-07 00:29:20,266 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2021-12-07 00:29:20,283 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2021-12-07 00:29:20,283 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73065 transitions. [2021-12-07 00:29:20,283 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:20,283 INFO L681 BuchiCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2021-12-07 00:29:20,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73065 transitions. [2021-12-07 00:29:20,645 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2021-12-07 00:29:20,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499341705489163) internal successors, (73065), 39495 states have internal predecessors, (73065), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:20,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73065 transitions. [2021-12-07 00:29:20,735 INFO L704 BuchiCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2021-12-07 00:29:20,735 INFO L587 BuchiCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2021-12-07 00:29:20,735 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-12-07 00:29:20,735 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73065 transitions. [2021-12-07 00:29:20,818 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2021-12-07 00:29:20,818 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:20,818 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:20,819 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:20,820 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:20,820 INFO L791 eck$LassoCheckResult]: Stem: 934590#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 934591#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 936388#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 936287#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 934989#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 934561#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 934232#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 934233#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 935501#L467 assume !(0 == getOrigin_~person#1); 934717#L471 assume !(1 == getOrigin_~person#1); 934718#L475 assume !(2 == getOrigin_~person#1); 934421#L479 assume !(3 == getOrigin_~person#1); 934422#L483 assume !(4 == getOrigin_~person#1); 934551#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 935528#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 935963#L3068 assume !(0 == initPersonOnFloor_~floor#1); 934536#L3095 assume 1 == initPersonOnFloor_~floor#1; 934537#L3096 assume !(0 == initPersonOnFloor_~person#1); 936345#L3099 assume !(1 == initPersonOnFloor_~person#1); 934039#L3102 assume !(2 == initPersonOnFloor_~person#1); 934040#L3105 assume !(3 == initPersonOnFloor_~person#1); 936565#L3108 assume !(4 == initPersonOnFloor_~person#1); 936627#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 935888#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 934678#L2860 assume !(0 == callOnFloor_~floorID#1); 934679#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 934223#L2872-2 assume { :end_inline_callOnFloor } true; 936484#L3212 assume { :end_inline_initPersonOnFloor } true; 935065#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 935066#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 935801#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 936870#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 936868#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 936867#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 936836#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 936837#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 936628#L1966 assume !(0 != timeShift_~tmp___9~2#1); 936629#L2057 assume !(1 == ~doorState~0); 937075#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 945015#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 945014#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 945013#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 945012#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 944934#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 944933#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 944931#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 944929#L1753 assume !(1 == ~currentHeading~0); 944930#L1763 assume !(0 == ~currentFloorID~0); 936847#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 938848#L1769-1 assume { :end_inline_continueInDirection } true; 949703#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 949702#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 949701#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 949699#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 949700#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 949668#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 949664#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 949662#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 949660#L207-2 assume !false; 949661#L208 [2021-12-07 00:29:20,820 INFO L793 eck$LassoCheckResult]: Loop: 949661#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 962790#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 962789#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 962788#L215 assume 1 != cleanup_~tmp___0~0#1; 962787#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 962782#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 962780#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 962764#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 962755#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 962754#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 962753#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 962752#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 953840#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 962751#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 962749#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 962746#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 962740#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 962723#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 962722#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 962720#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 962714#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 962715#L1968-2 assume !(0 != ~persons_0~0); 966574#L1968-3 assume !(0 != ~persons_1~0); 966537#L1982-1 assume !(0 != ~persons_2~0); 966511#L1996-1 assume !(0 != ~persons_3~0); 966494#L2010-1 assume !(0 != ~persons_4~0); 966486#L2024-1 assume !(0 != ~persons_5~0); 966482#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 966478#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 966451#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 966439#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 966431#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 966429#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 966426#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 966401#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 966386#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 966378#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 966305#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 966304#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 966286#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 966269#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 966265#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 966263#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 966262#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 966191#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 962938#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 962935#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 962929#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 962927#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 962916#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 962890#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 962881#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 962880#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 962879#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 962873#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 962838#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 962836#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 962834#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 962833#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 962828#L2844-41 assume { :end_inline_resetCallOnFloor } true; 962827#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 962825#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 962821#L1127-5 assume { :end_inline_resetFloorButton } true; 962818#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 962815#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 962814#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 962812#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 962810#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 962808#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 962794#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 962792#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 962791#L207-2 assume !false; 949661#L208 [2021-12-07 00:29:20,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:20,820 INFO L85 PathProgramCache]: Analyzing trace with hash -1855900741, now seen corresponding path program 1 times [2021-12-07 00:29:20,820 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:20,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [171456290] [2021-12-07 00:29:20,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:20,821 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:20,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:20,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:20,843 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:20,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [171456290] [2021-12-07 00:29:20,843 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [171456290] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:20,843 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:20,843 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:29:20,843 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [975675890] [2021-12-07 00:29:20,843 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:20,844 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:20,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:20,844 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 10 times [2021-12-07 00:29:20,844 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:20,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1761978426] [2021-12-07 00:29:20,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:20,844 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:20,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:20,876 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:20,876 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:20,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1761978426] [2021-12-07 00:29:20,876 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1761978426] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:20,876 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:20,876 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-07 00:29:20,876 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1883972793] [2021-12-07 00:29:20,876 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:20,876 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:20,877 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:20,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:20,877 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:20,877 INFO L87 Difference]: Start difference. First operand 39496 states and 73065 transitions. cyclomatic complexity: 33578 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:21,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:21,273 INFO L93 Difference]: Finished difference Result 27702 states and 50280 transitions. [2021-12-07 00:29:21,273 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-07 00:29:21,274 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27702 states and 50280 transitions. [2021-12-07 00:29:21,358 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 14022 [2021-12-07 00:29:21,425 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27702 states to 27702 states and 50280 transitions. [2021-12-07 00:29:21,425 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18602 [2021-12-07 00:29:21,437 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18602 [2021-12-07 00:29:21,437 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27702 states and 50280 transitions. [2021-12-07 00:29:21,437 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:21,437 INFO L681 BuchiCegarLoop]: Abstraction has 27702 states and 50280 transitions. [2021-12-07 00:29:21,449 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27702 states and 50280 transitions. [2021-12-07 00:29:21,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27702 to 15969. [2021-12-07 00:29:21,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15969 states, 15969 states have (on average 1.8000500970630597) internal successors, (28745), 15968 states have internal predecessors, (28745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:21,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15969 states to 15969 states and 28745 transitions. [2021-12-07 00:29:21,615 INFO L704 BuchiCegarLoop]: Abstraction has 15969 states and 28745 transitions. [2021-12-07 00:29:21,615 INFO L587 BuchiCegarLoop]: Abstraction has 15969 states and 28745 transitions. [2021-12-07 00:29:21,615 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-12-07 00:29:21,615 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15969 states and 28745 transitions. [2021-12-07 00:29:21,646 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 7949 [2021-12-07 00:29:21,646 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:21,646 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:21,647 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:21,647 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:21,647 INFO L791 eck$LassoCheckResult]: Stem: 1001809#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1001810#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1003596#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1003486#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1002210#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1001779#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1001443#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1001444#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1002726#L467 assume !(0 == getOrigin_~person#1); 1001938#L471 assume !(1 == getOrigin_~person#1); 1001939#L475 assume !(2 == getOrigin_~person#1); 1001639#L479 assume !(3 == getOrigin_~person#1); 1001640#L483 assume !(4 == getOrigin_~person#1); 1001769#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1002757#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1003179#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1001754#L3095 assume 1 == initPersonOnFloor_~floor#1; 1001755#L3096 assume !(0 == initPersonOnFloor_~person#1); 1003549#L3099 assume !(1 == initPersonOnFloor_~person#1); 1001251#L3102 assume !(2 == initPersonOnFloor_~person#1); 1001252#L3105 assume !(3 == initPersonOnFloor_~person#1); 1003768#L3108 assume !(4 == initPersonOnFloor_~person#1); 1003826#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1003098#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1001893#L2860 assume !(0 == callOnFloor_~floorID#1); 1001894#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1001434#L2872-2 assume { :end_inline_callOnFloor } true; 1003685#L3212 assume { :end_inline_initPersonOnFloor } true; 1002289#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1002290#L2797 assume !(0 == isFloorCalling_~floorID#1); 1003018#L2801 assume !(1 == isFloorCalling_~floorID#1); 1001437#L2805 assume !(2 == isFloorCalling_~floorID#1); 1001297#L2809 assume !(3 == isFloorCalling_~floorID#1); 1001298#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1001732#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1001523#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1000571#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1000573#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1003510#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1003783#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1003829#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1003691#L2057 assume !(1 == ~doorState~0); 1003692#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 999984#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 999985#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1003906#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1003907#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1002418#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1002419#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1003990#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1003991#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1003368#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1000702#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1003105#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1003181#L1753 assume !(1 == ~currentHeading~0); 1004522#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1004063#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1004498#L1769-1 assume { :end_inline_continueInDirection } true; 1003668#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1004480#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1004476#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1004471#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1004463#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1004450#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1004441#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1004408#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1004387#L207-2 assume !false; 1004388#L208 [2021-12-07 00:29:21,648 INFO L793 eck$LassoCheckResult]: Loop: 1004388#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1010331#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1010330#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1010328#L215 assume 1 != cleanup_~tmp___0~0#1; 1010327#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1010326#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1010320#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1010306#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1010297#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1010135#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1010061#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1010060#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1010059#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1010058#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1010057#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1010056#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1010055#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1010054#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1010052#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1010051#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1010048#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1010045#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1010042#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1009869#L1968-2 assume !(0 != ~persons_0~0); 1011381#L1968-3 assume !(0 != ~persons_1~0); 1011375#L1982-1 assume !(0 != ~persons_2~0); 1011350#L1996-1 assume !(0 != ~persons_3~0); 1011345#L2010-1 assume !(0 != ~persons_4~0); 1011340#L2024-1 assume !(0 != ~persons_5~0); 1011336#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1011335#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1011310#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1011135#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1011110#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1011106#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1011099#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1011077#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1011063#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1011059#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1011057#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1011056#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1011034#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1011016#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1011008#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1011006#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1011005#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1010985#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010963#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1010955#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1010953#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010797#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1010737#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010706#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1010694#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1010691#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010688#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1010681#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010651#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1010560#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1010557#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1010554#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1010534#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1010530#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1010525#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1010516#L1127-5 assume { :end_inline_resetFloorButton } true; 1010494#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1010488#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1010480#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1010475#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1010473#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1010468#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1010335#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1010333#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1010332#L207-2 assume !false; 1004388#L208 [2021-12-07 00:29:21,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:21,648 INFO L85 PathProgramCache]: Analyzing trace with hash 1809966439, now seen corresponding path program 1 times [2021-12-07 00:29:21,648 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:21,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [192413391] [2021-12-07 00:29:21,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:21,648 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:21,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:21,676 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:21,677 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:21,677 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [192413391] [2021-12-07 00:29:21,677 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [192413391] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:21,677 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:21,677 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:29:21,677 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247466470] [2021-12-07 00:29:21,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:21,677 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:21,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:21,678 INFO L85 PathProgramCache]: Analyzing trace with hash -1832533435, now seen corresponding path program 1 times [2021-12-07 00:29:21,678 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:21,678 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1476730129] [2021-12-07 00:29:21,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:21,678 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:21,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:21,692 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:21,692 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:21,692 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1476730129] [2021-12-07 00:29:21,692 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1476730129] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:21,692 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:21,692 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:21,692 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1591024367] [2021-12-07 00:29:21,692 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:21,693 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:21,693 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:21,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:29:21,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:29:21,693 INFO L87 Difference]: Start difference. First operand 15969 states and 28745 transitions. cyclomatic complexity: 12780 Second operand has 6 states, 6 states have (on average 11.166666666666666) internal successors, (67), 5 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:22,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:22,917 INFO L93 Difference]: Finished difference Result 104406 states and 190999 transitions. [2021-12-07 00:29:22,917 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-07 00:29:22,918 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104406 states and 190999 transitions. [2021-12-07 00:29:23,338 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 41283 [2021-12-07 00:29:23,652 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104406 states to 104406 states and 190999 transitions. [2021-12-07 00:29:23,652 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69976 [2021-12-07 00:29:23,705 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69976 [2021-12-07 00:29:23,705 INFO L73 IsDeterministic]: Start isDeterministic. Operand 104406 states and 190999 transitions. [2021-12-07 00:29:23,706 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:23,706 INFO L681 BuchiCegarLoop]: Abstraction has 104406 states and 190999 transitions. [2021-12-07 00:29:23,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104406 states and 190999 transitions. [2021-12-07 00:29:24,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104406 to 31620. [2021-12-07 00:29:24,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31620 states, 31620 states have (on average 1.8004427577482607) internal successors, (56930), 31619 states have internal predecessors, (56930), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:24,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31620 states to 31620 states and 56930 transitions. [2021-12-07 00:29:24,377 INFO L704 BuchiCegarLoop]: Abstraction has 31620 states and 56930 transitions. [2021-12-07 00:29:24,377 INFO L587 BuchiCegarLoop]: Abstraction has 31620 states and 56930 transitions. [2021-12-07 00:29:24,377 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-12-07 00:29:24,377 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31620 states and 56930 transitions. [2021-12-07 00:29:24,443 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 15745 [2021-12-07 00:29:24,443 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:24,443 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:24,445 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:24,445 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:24,445 INFO L791 eck$LassoCheckResult]: Stem: 1122200#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1122201#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1123979#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1123878#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1122598#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1122173#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1121840#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1121841#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1123111#L467 assume !(0 == getOrigin_~person#1); 1122325#L471 assume !(1 == getOrigin_~person#1); 1122326#L475 assume !(2 == getOrigin_~person#1); 1122035#L479 assume !(3 == getOrigin_~person#1); 1122036#L483 assume !(4 == getOrigin_~person#1); 1122163#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1123140#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1123567#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1122148#L3095 assume 1 == initPersonOnFloor_~floor#1; 1122149#L3096 assume !(0 == initPersonOnFloor_~person#1); 1123939#L3099 assume !(1 == initPersonOnFloor_~person#1); 1121652#L3102 assume !(2 == initPersonOnFloor_~person#1); 1121653#L3105 assume !(3 == initPersonOnFloor_~person#1); 1124160#L3108 assume !(4 == initPersonOnFloor_~person#1); 1124232#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1123497#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1122287#L2860 assume !(0 == callOnFloor_~floorID#1); 1122288#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1121831#L2872-2 assume { :end_inline_callOnFloor } true; 1124071#L3212 assume { :end_inline_initPersonOnFloor } true; 1124072#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1123410#L2797 assume !(0 == isFloorCalling_~floorID#1); 1123411#L2801 assume !(1 == isFloorCalling_~floorID#1); 1121834#L2805 assume !(2 == isFloorCalling_~floorID#1); 1121692#L2809 assume !(3 == isFloorCalling_~floorID#1); 1121693#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1123318#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1123319#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1120973#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1120974#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1122236#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1123108#L1786-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1120960#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1125213#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1125211#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1124077#L2057 assume !(1 == ~doorState~0); 1124078#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1128914#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1128913#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1128912#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1128911#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1128910#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1128909#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1128908#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1128906#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1123757#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1121103#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1123503#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1123569#L1753 assume !(1 == ~currentHeading~0); 1129386#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1124454#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1134910#L1769-1 assume { :end_inline_continueInDirection } true; 1124052#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1135335#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1135334#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1135333#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1135332#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1135311#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1135308#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1135306#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1135297#L207-2 assume !false; 1135298#L208 [2021-12-07 00:29:24,445 INFO L793 eck$LassoCheckResult]: Loop: 1135298#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1138533#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1138525#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1138491#L215 assume 1 != cleanup_~tmp___0~0#1; 1138489#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1138488#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1138463#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1138440#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1138409#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1138406#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1137234#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1137233#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1137232#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1137231#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1137230#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1137229#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1137228#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1137227#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1137226#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1137225#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1137219#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1137194#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1137190#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1137188#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1137186#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1137185#L1968-2 assume !(0 != ~persons_0~0); 1143284#L1968-3 assume !(0 != ~persons_1~0); 1143278#L1982-1 assume !(0 != ~persons_2~0); 1143251#L1996-1 assume !(0 != ~persons_3~0); 1143246#L2010-1 assume !(0 != ~persons_4~0); 1143241#L2024-1 assume !(0 != ~persons_5~0); 1143237#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1143235#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1143213#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1143202#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1143200#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1143198#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1143197#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1143177#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1143157#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1143155#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1143153#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1143152#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1142959#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1142936#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1142934#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1142932#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1142931#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1142904#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1142881#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1142868#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1142866#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1142865#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1142854#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1142001#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1141997#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1141990#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1141989#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1138897#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1138864#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1138860#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1138858#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1138804#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1138795#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1138792#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1138788#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1138591#L1127-5 assume { :end_inline_resetFloorButton } true; 1138589#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1138588#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1138587#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1138585#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1138586#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1138563#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1138551#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1138548#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1138545#L207-2 assume !false; 1135298#L208 [2021-12-07 00:29:24,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:24,446 INFO L85 PathProgramCache]: Analyzing trace with hash 1772525671, now seen corresponding path program 1 times [2021-12-07 00:29:24,446 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:24,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437714546] [2021-12-07 00:29:24,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:24,446 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:24,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:24,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:24,471 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:24,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437714546] [2021-12-07 00:29:24,471 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [437714546] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:24,471 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:24,471 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:24,471 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [262501034] [2021-12-07 00:29:24,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:24,471 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:24,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:24,472 INFO L85 PathProgramCache]: Analyzing trace with hash -583023835, now seen corresponding path program 1 times [2021-12-07 00:29:24,472 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:24,472 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1903451694] [2021-12-07 00:29:24,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:24,472 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:24,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:24,489 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:24,490 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:24,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1903451694] [2021-12-07 00:29:24,490 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1903451694] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:24,490 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:24,490 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:29:24,490 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1916207836] [2021-12-07 00:29:24,490 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:24,490 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:24,490 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:24,491 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 00:29:24,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 00:29:24,491 INFO L87 Difference]: Start difference. First operand 31620 states and 56930 transitions. cyclomatic complexity: 25318 Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 4 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:25,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:25,296 INFO L93 Difference]: Finished difference Result 93785 states and 169257 transitions. [2021-12-07 00:29:25,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-07 00:29:25,296 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 93785 states and 169257 transitions. [2021-12-07 00:29:25,597 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 46706 [2021-12-07 00:29:25,826 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 93785 states to 93785 states and 169257 transitions. [2021-12-07 00:29:25,827 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63069 [2021-12-07 00:29:25,866 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63069 [2021-12-07 00:29:25,866 INFO L73 IsDeterministic]: Start isDeterministic. Operand 93785 states and 169257 transitions. [2021-12-07 00:29:25,867 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:25,867 INFO L681 BuchiCegarLoop]: Abstraction has 93785 states and 169257 transitions. [2021-12-07 00:29:25,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93785 states and 169257 transitions. [2021-12-07 00:29:26,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93785 to 31722. [2021-12-07 00:29:26,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31722 states, 31722 states have (on average 1.797868986823025) internal successors, (57032), 31721 states have internal predecessors, (57032), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:26,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31722 states to 31722 states and 57032 transitions. [2021-12-07 00:29:26,507 INFO L704 BuchiCegarLoop]: Abstraction has 31722 states and 57032 transitions. [2021-12-07 00:29:26,507 INFO L587 BuchiCegarLoop]: Abstraction has 31722 states and 57032 transitions. [2021-12-07 00:29:26,507 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-12-07 00:29:26,507 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31722 states and 57032 transitions. [2021-12-07 00:29:26,574 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 15799 [2021-12-07 00:29:26,574 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:26,574 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:26,575 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:26,576 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:26,576 INFO L791 eck$LassoCheckResult]: Stem: 1247626#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1247627#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1249412#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1249304#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1248019#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1247599#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1247261#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1247262#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1248516#L467 assume !(0 == getOrigin_~person#1); 1247750#L471 assume !(1 == getOrigin_~person#1); 1247751#L475 assume !(2 == getOrigin_~person#1); 1247460#L479 assume !(3 == getOrigin_~person#1); 1247461#L483 assume !(4 == getOrigin_~person#1); 1247589#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1248550#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1248980#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1247573#L3095 assume 1 == initPersonOnFloor_~floor#1; 1247574#L3096 assume !(0 == initPersonOnFloor_~person#1); 1249361#L3099 assume !(1 == initPersonOnFloor_~person#1); 1247073#L3102 assume !(2 == initPersonOnFloor_~person#1); 1247074#L3105 assume !(3 == initPersonOnFloor_~person#1); 1249601#L3108 assume !(4 == initPersonOnFloor_~person#1); 1249664#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1248898#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1247711#L2860 assume !(0 == callOnFloor_~floorID#1); 1247712#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1247252#L2872-2 assume { :end_inline_callOnFloor } true; 1249507#L3212 assume { :end_inline_initPersonOnFloor } true; 1249508#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1248820#L2797 assume !(0 == isFloorCalling_~floorID#1); 1248821#L2801 assume !(1 == isFloorCalling_~floorID#1); 1247255#L2805 assume !(2 == isFloorCalling_~floorID#1); 1247113#L2809 assume !(3 == isFloorCalling_~floorID#1); 1247114#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1248730#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1248731#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1246391#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1246392#L2797-2 assume !(0 == isFloorCalling_~floorID#1); 1249617#L2801-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1247802#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1249898#L1786-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1246378#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1249623#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1249666#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1249667#L2057 assume !(1 == ~doorState~0); 1247677#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1245806#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1245807#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1248442#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1248687#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1248225#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1246248#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1246249#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1249788#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1249180#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1249181#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1253613#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1253614#L1753 assume !(1 == ~currentHeading~0); 1252207#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1252204#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1252088#L1769-1 assume { :end_inline_continueInDirection } true; 1249488#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1252086#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1252084#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1252082#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1252083#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1252008#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1252002#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1252001#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1251953#L207-2 assume !false; 1251954#L208 [2021-12-07 00:29:26,576 INFO L793 eck$LassoCheckResult]: Loop: 1251954#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1263839#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1263838#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1263837#L215 assume 1 != cleanup_~tmp___0~0#1; 1263835#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1263834#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1263829#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1263788#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1263778#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1263769#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1263620#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1263619#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1263618#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1263617#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1263616#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1263615#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1263613#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1263608#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1263606#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1263605#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1263602#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1263599#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1263596#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1263594#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1263592#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1263589#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1263590#L1968-2 assume !(0 != ~persons_0~0); 1267549#L1968-3 assume !(0 != ~persons_1~0); 1267530#L1982-1 assume !(0 != ~persons_2~0); 1267517#L1996-1 assume !(0 != ~persons_3~0); 1267477#L2010-1 assume !(0 != ~persons_4~0); 1267472#L2024-1 assume !(0 != ~persons_5~0); 1267468#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1267466#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1267431#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1267414#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1267405#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1267401#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1267400#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1267375#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1267360#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1267350#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1267348#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1267347#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1266710#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266687#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1266685#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1266683#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266682#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1266331#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266310#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1266306#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1266304#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266303#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1266244#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266211#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1266203#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1266201#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266200#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1266188#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266158#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1266150#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1266148#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1266147#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1266140#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1266139#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1266137#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1266133#L1127-5 assume { :end_inline_resetFloorButton } true; 1266130#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1266129#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1264288#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1264286#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1264287#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1264152#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1264138#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1263893#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1263887#L207-2 assume !false; 1251954#L208 [2021-12-07 00:29:26,576 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:26,576 INFO L85 PathProgramCache]: Analyzing trace with hash 1529154201, now seen corresponding path program 1 times [2021-12-07 00:29:26,576 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:26,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524718307] [2021-12-07 00:29:26,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:26,577 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:26,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:26,600 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:26,600 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:26,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524718307] [2021-12-07 00:29:26,600 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [524718307] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:26,600 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:26,600 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:29:26,600 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [351474236] [2021-12-07 00:29:26,600 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:26,600 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:26,600 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:26,601 INFO L85 PathProgramCache]: Analyzing trace with hash 1612225554, now seen corresponding path program 1 times [2021-12-07 00:29:26,601 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:26,601 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424058273] [2021-12-07 00:29:26,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:26,601 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:26,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:26,627 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:26,627 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:26,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424058273] [2021-12-07 00:29:26,628 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1424058273] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:26,628 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:26,628 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:26,628 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1598156092] [2021-12-07 00:29:26,628 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:26,628 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:26,628 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:26,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:26,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:26,628 INFO L87 Difference]: Start difference. First operand 31722 states and 57032 transitions. cyclomatic complexity: 25318 Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 3 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:27,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:27,457 INFO L93 Difference]: Finished difference Result 62479 states and 112227 transitions. [2021-12-07 00:29:27,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-07 00:29:27,458 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62479 states and 112227 transitions. [2021-12-07 00:29:27,690 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 31546 [2021-12-07 00:29:27,864 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62479 states to 62479 states and 112227 transitions. [2021-12-07 00:29:27,865 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40123 [2021-12-07 00:29:27,891 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40123 [2021-12-07 00:29:27,891 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62479 states and 112227 transitions. [2021-12-07 00:29:27,895 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:27,895 INFO L681 BuchiCegarLoop]: Abstraction has 62479 states and 112227 transitions. [2021-12-07 00:29:27,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62479 states and 112227 transitions. [2021-12-07 00:29:28,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62479 to 36080. [2021-12-07 00:29:28,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36080 states, 36080 states have (on average 1.7754988913525498) internal successors, (64060), 36079 states have internal predecessors, (64060), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:28,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36080 states to 36080 states and 64060 transitions. [2021-12-07 00:29:28,421 INFO L704 BuchiCegarLoop]: Abstraction has 36080 states and 64060 transitions. [2021-12-07 00:29:28,421 INFO L587 BuchiCegarLoop]: Abstraction has 36080 states and 64060 transitions. [2021-12-07 00:29:28,421 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-12-07 00:29:28,421 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 36080 states and 64060 transitions. [2021-12-07 00:29:28,497 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 18244 [2021-12-07 00:29:28,497 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:28,497 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:28,499 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:28,499 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:28,499 INFO L791 eck$LassoCheckResult]: Stem: 1341749#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1341750#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1343498#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1343387#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1342109#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1341725#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1341409#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1341410#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1342603#L467 assume !(0 == getOrigin_~person#1); 1341872#L471 assume !(1 == getOrigin_~person#1); 1341873#L475 assume !(2 == getOrigin_~person#1); 1341590#L479 assume !(3 == getOrigin_~person#1); 1341591#L483 assume !(4 == getOrigin_~person#1); 1341715#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1342634#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1343064#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1341700#L3095 assume 1 == initPersonOnFloor_~floor#1; 1341701#L3096 assume !(0 == initPersonOnFloor_~person#1); 1343454#L3099 assume !(1 == initPersonOnFloor_~person#1); 1341236#L3102 assume !(2 == initPersonOnFloor_~person#1); 1341237#L3105 assume !(3 == initPersonOnFloor_~person#1); 1343688#L3108 assume !(4 == initPersonOnFloor_~person#1); 1343750#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1342986#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1341836#L2860 assume !(0 == callOnFloor_~floorID#1); 1341837#L2863 assume !(1 == callOnFloor_~floorID#1); 1341399#L2866 assume !(2 == callOnFloor_~floorID#1); 1341401#L2869 assume !(3 == callOnFloor_~floorID#1); 1342742#L2872 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1342743#L2872-2 assume { :end_inline_callOnFloor } true; 1343598#L3212 assume { :end_inline_initPersonOnFloor } true; 1342184#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1342185#L2797 assume !(0 == isFloorCalling_~floorID#1); 1342907#L2801 assume !(1 == isFloorCalling_~floorID#1); 1341403#L2805 assume !(2 == isFloorCalling_~floorID#1); 1341276#L2809 assume !(3 == isFloorCalling_~floorID#1); 1341277#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1341678#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1341481#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1341482#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1343410#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1343411#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1343705#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1343751#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1343752#L2057 assume !(1 == ~doorState~0); 1347773#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1347772#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1347771#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1347770#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1347769#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1347768#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1347767#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1347766#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1347764#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1347762#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1347761#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1347759#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1347758#L1753 assume !(1 == ~currentHeading~0); 1347756#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1347752#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1347749#L1769-1 assume { :end_inline_continueInDirection } true; 1347747#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1347748#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1347742#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1347743#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1347738#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1347739#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1350220#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1350209#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1350204#L207-2 assume !false; 1350205#L208 [2021-12-07 00:29:28,499 INFO L793 eck$LassoCheckResult]: Loop: 1350205#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1360823#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1360821#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1360561#L215 assume 1 != cleanup_~tmp___0~0#1; 1360394#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1360392#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1360390#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1360384#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1360374#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1360372#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1360344#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1360343#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1360342#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1360341#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1360340#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1360339#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1360338#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1360337#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1360335#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1360334#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1360331#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1360324#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1360320#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1360321#L1968-2 assume !(0 != ~persons_0~0); 1361787#L1968-3 assume !(0 != ~persons_1~0); 1361781#L1982-1 assume !(0 != ~persons_2~0); 1361756#L1996-1 assume !(0 != ~persons_3~0); 1361751#L2010-1 assume !(0 != ~persons_4~0); 1361746#L2024-1 assume !(0 != ~persons_5~0); 1361737#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361735#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1361704#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361687#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1361685#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1361683#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361681#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1361663#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361643#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1361641#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1361639#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361638#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1361613#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361596#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1361588#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1361585#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361584#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1361570#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361549#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1361360#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1361353#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361351#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1361089#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361063#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1361054#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1361053#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361052#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1361032#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1360997#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1360988#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1360986#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1360922#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1360907#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1360902#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1360898#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1360887#L1127-5 assume { :end_inline_resetFloorButton } true; 1360884#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1360882#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1360876#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1360874#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1360870#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1360863#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1360850#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1360843#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1360831#L207-2 assume !false; 1350205#L208 [2021-12-07 00:29:28,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:28,561 INFO L85 PathProgramCache]: Analyzing trace with hash -1232492494, now seen corresponding path program 1 times [2021-12-07 00:29:28,561 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:28,561 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1323950730] [2021-12-07 00:29:28,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:28,561 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:28,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:28,583 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:28,583 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:28,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1323950730] [2021-12-07 00:29:28,583 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1323950730] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:28,583 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:28,583 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:29:28,583 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1283442350] [2021-12-07 00:29:28,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:28,583 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:28,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:28,584 INFO L85 PathProgramCache]: Analyzing trace with hash -1832533435, now seen corresponding path program 2 times [2021-12-07 00:29:28,584 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:28,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [221290733] [2021-12-07 00:29:28,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:28,584 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:28,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:28,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:28,597 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:28,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [221290733] [2021-12-07 00:29:28,598 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [221290733] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:28,598 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:28,598 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:28,598 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [666506300] [2021-12-07 00:29:28,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:28,598 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:28,598 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:28,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 00:29:28,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 00:29:28,599 INFO L87 Difference]: Start difference. First operand 36080 states and 64060 transitions. cyclomatic complexity: 27992 Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:28,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:28,667 INFO L93 Difference]: Finished difference Result 17880 states and 31744 transitions. [2021-12-07 00:29:28,667 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-07 00:29:28,668 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17880 states and 31744 transitions. [2021-12-07 00:29:28,716 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9030 [2021-12-07 00:29:28,754 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17880 states to 17880 states and 31744 transitions. [2021-12-07 00:29:28,754 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11471 [2021-12-07 00:29:28,760 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11471 [2021-12-07 00:29:28,760 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17880 states and 31744 transitions. [2021-12-07 00:29:28,760 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:28,761 INFO L681 BuchiCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2021-12-07 00:29:28,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17880 states and 31744 transitions. [2021-12-07 00:29:28,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17880 to 17880. [2021-12-07 00:29:28,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17880 states, 17880 states have (on average 1.7753914988814317) internal successors, (31744), 17879 states have internal predecessors, (31744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:28,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17880 states to 17880 states and 31744 transitions. [2021-12-07 00:29:28,911 INFO L704 BuchiCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2021-12-07 00:29:28,911 INFO L587 BuchiCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2021-12-07 00:29:28,911 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-12-07 00:29:28,911 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17880 states and 31744 transitions. [2021-12-07 00:29:28,945 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9030 [2021-12-07 00:29:28,945 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:28,945 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:28,946 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:28,946 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:28,946 INFO L791 eck$LassoCheckResult]: Stem: 1395666#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1395667#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1397211#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1397130#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1396002#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1395639#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1395331#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1395332#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1396455#L467 assume !(0 == getOrigin_~person#1); 1395776#L471 assume !(1 == getOrigin_~person#1); 1395777#L475 assume !(2 == getOrigin_~person#1); 1395501#L479 assume !(3 == getOrigin_~person#1); 1395502#L483 assume !(4 == getOrigin_~person#1); 1395628#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1396483#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1396857#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1395612#L3095 assume 1 == initPersonOnFloor_~floor#1; 1395613#L3096 assume !(0 == initPersonOnFloor_~person#1); 1397178#L3099 assume !(1 == initPersonOnFloor_~person#1); 1395171#L3102 assume !(2 == initPersonOnFloor_~person#1); 1395172#L3105 assume !(3 == initPersonOnFloor_~person#1); 1397354#L3108 assume !(4 == initPersonOnFloor_~person#1); 1397394#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1396789#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1395742#L2860 assume !(0 == callOnFloor_~floorID#1); 1395743#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1396710#L2872-2 assume { :end_inline_callOnFloor } true; 1397287#L3212 assume { :end_inline_initPersonOnFloor } true; 1396075#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1396076#L2797 assume !(0 == isFloorCalling_~floorID#1); 1396717#L2801 assume !(1 == isFloorCalling_~floorID#1); 1395325#L2805 assume !(2 == isFloorCalling_~floorID#1); 1395210#L2809 assume !(3 == isFloorCalling_~floorID#1); 1395211#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1395590#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1395402#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1394550#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1394551#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1395694#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1396452#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1394222#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1394223#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1394536#L1793-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1394537#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1397365#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1397395#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1397290#L2057 assume !(1 == ~doorState~0); 1395711#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1393992#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1393993#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1396386#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1396604#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1396184#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1394410#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1394411#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1397484#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1397485#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1398059#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1398058#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1394566#L1753 assume !(1 == ~currentHeading~0); 1394567#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1398077#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1398028#L1769-1 assume { :end_inline_continueInDirection } true; 1398027#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1398026#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1398025#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1398023#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1398024#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1397986#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1397982#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1397980#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1397978#L207-2 assume !false; 1397979#L208 WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [2021-12-07 00:29:31,219 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:31,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1214926070] [2021-12-07 00:29:31,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:31,219 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:31,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:31,238 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:31,238 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:31,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1214926070] [2021-12-07 00:29:31,238 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1214926070] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:31,238 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:31,238 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-07 00:29:31,238 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [293624268] [2021-12-07 00:29:31,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:31,238 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:31,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:31,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1612225554, now seen corresponding path program 3 times [2021-12-07 00:29:31,239 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:31,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1801909156] [2021-12-07 00:29:31,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:31,239 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:31,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:31,263 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:31,263 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:31,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1801909156] [2021-12-07 00:29:31,264 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1801909156] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:31,264 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:31,264 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:31,264 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1104686987] [2021-12-07 00:29:31,264 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:31,264 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:31,264 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:31,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 00:29:31,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:29:31,264 INFO L87 Difference]: Start difference. First operand 34535 states and 61325 transitions. cyclomatic complexity: 26796 Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 2 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:31,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:31,354 INFO L93 Difference]: Finished difference Result 27550 states and 49504 transitions. [2021-12-07 00:29:31,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 00:29:31,354 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27550 states and 49504 transitions. [2021-12-07 00:29:31,440 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14554 [2021-12-07 00:29:31,506 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27550 states to 27550 states and 49504 transitions. [2021-12-07 00:29:31,506 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17440 [2021-12-07 00:29:31,516 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17440 [2021-12-07 00:29:31,516 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27550 states and 49504 transitions. [2021-12-07 00:29:31,517 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:31,517 INFO L681 BuchiCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2021-12-07 00:29:31,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27550 states and 49504 transitions. [2021-12-07 00:29:31,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27550 to 27550. [2021-12-07 00:29:31,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27550 states, 27550 states have (on average 1.7968784029038112) internal successors, (49504), 27549 states have internal predecessors, (49504), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:31,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27550 states to 27550 states and 49504 transitions. [2021-12-07 00:29:31,759 INFO L704 BuchiCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2021-12-07 00:29:31,759 INFO L587 BuchiCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2021-12-07 00:29:31,759 INFO L425 BuchiCegarLoop]: ======== Iteration 21============ [2021-12-07 00:29:31,760 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27550 states and 49504 transitions. [2021-12-07 00:29:31,817 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14554 [2021-12-07 00:29:31,817 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:31,817 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:31,821 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:31,821 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:31,821 INFO L791 eck$LassoCheckResult]: Stem: 1606228#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1606229#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1607786#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1607708#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1606575#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1606204#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1605900#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1605901#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1607032#L467 assume !(0 == getOrigin_~person#1); 1606347#L471 assume !(1 == getOrigin_~person#1); 1606348#L475 assume !(2 == getOrigin_~person#1); 1606065#L479 assume !(3 == getOrigin_~person#1); 1606066#L483 assume !(4 == getOrigin_~person#1); 1606192#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1607062#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1607447#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1606179#L3095 assume 1 == initPersonOnFloor_~floor#1; 1606180#L3096 assume !(0 == initPersonOnFloor_~person#1); 1607756#L3099 assume !(1 == initPersonOnFloor_~person#1); 1605725#L3102 assume !(2 == initPersonOnFloor_~person#1); 1605726#L3105 assume !(3 == initPersonOnFloor_~person#1); 1607942#L3108 assume !(4 == initPersonOnFloor_~person#1); 1607989#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1607378#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1606312#L2860 assume !(0 == callOnFloor_~floorID#1); 1606313#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1607296#L2872-2 assume { :end_inline_callOnFloor } true; 1607869#L3212 assume { :end_inline_initPersonOnFloor } true; 1606648#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1606649#L2797 assume !(0 == isFloorCalling_~floorID#1); 1607305#L2801 assume !(1 == isFloorCalling_~floorID#1); 1605894#L2805 assume !(2 == isFloorCalling_~floorID#1); 1605766#L2809 assume !(3 == isFloorCalling_~floorID#1); 1605767#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1606158#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1605968#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1605092#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1605093#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1606264#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1607029#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1604767#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1604768#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1605084#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1605085#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1607953#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1607994#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1607873#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1606279#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1604538#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1604539#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1606964#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1607188#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1606751#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1604959#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1604960#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1608082#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1607615#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1605211#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1607389#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1605114#L1753 assume !(1 == ~currentHeading~0); 1605115#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1607238#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1607678#L1769-1 assume { :end_inline_continueInDirection } true; 1605785#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1605786#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1606005#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1606007#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1604903#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1604904#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1611281#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1611277#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1611265#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1611262#L207-2 assume !false; 1611263#L208 [2021-12-07 00:29:31,821 INFO L793 eck$LassoCheckResult]: Loop: 1611263#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1617861#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1617856#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1617854#L215 assume 1 != cleanup_~tmp___0~0#1; 1617851#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1617852#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1617835#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1617836#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1621805#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1621804#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1621803#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1621802#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1621801#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1621800#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1621799#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1621798#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1621797#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1621796#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1621795#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1621794#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1617767#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1617758#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1617771#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1621077#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1621076#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1621074#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1617735#L2057-3 assume !(1 == ~doorState~0); 1617711#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1617701#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1617692#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1617689#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1617685#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1617679#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1617676#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1617674#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1617671#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1617672#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1621498#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1621492#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1621493#L1753-3 assume !(1 == ~currentHeading~0); 1625213#L1763-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1617944#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1617562#L1769-7 assume { :end_inline_continueInDirection } true; 1623856#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623855#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1623854#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623853#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623852#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623851#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623850#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623845#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1623843#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1623842#L207-2 assume !false; 1623841#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1623840#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1623839#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1623838#L215 assume 1 != cleanup_~tmp___0~0#1; 1623837#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623832#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623830#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1623814#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1623805#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1623804#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1623803#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623802#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1623801#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1623799#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1623797#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1623796#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623795#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1623793#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1623791#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623789#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1623790#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623788#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1623774#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1623772#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1623770#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1623767#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1623765#L2057-3 assume !(1 == ~doorState~0); 1623762#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623761#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1623760#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1623759#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1623758#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1623757#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623756#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1623755#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1623754#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623697#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1623695#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1623691#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1623690#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1623688#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1623687#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1623684#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1623683#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1623681#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1623680#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1623677#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1623676#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1623673#L1696-3 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623650#L1144-6 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1623649#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1623647#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1623646#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1623645#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1623643#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1623642#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1623641#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1623640#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1623639#L1769-9 assume { :end_inline_continueInDirection } true; 1623638#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1623637#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1623636#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1623632#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1623630#L2609-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1623631#L1153-6 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1617871#L2613-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1617868#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1617866#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1617864#L207-2 assume !false; 1611263#L208 [2021-12-07 00:29:31,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:31,822 INFO L85 PathProgramCache]: Analyzing trace with hash 1818737528, now seen corresponding path program 1 times [2021-12-07 00:29:31,822 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:31,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [350235551] [2021-12-07 00:29:31,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:31,822 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:31,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:31,852 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:31,852 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:31,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [350235551] [2021-12-07 00:29:31,853 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [350235551] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:31,853 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:31,853 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:29:31,853 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [596313472] [2021-12-07 00:29:31,853 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:31,853 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:31,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:31,853 INFO L85 PathProgramCache]: Analyzing trace with hash -1545854462, now seen corresponding path program 1 times [2021-12-07 00:29:31,853 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:31,853 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [185309368] [2021-12-07 00:29:31,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:31,854 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:31,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:31,944 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2021-12-07 00:29:31,944 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:31,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [185309368] [2021-12-07 00:29:31,944 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [185309368] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:31,944 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:31,944 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:31,944 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1465676698] [2021-12-07 00:29:31,944 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:31,945 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:31,945 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:31,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:29:31,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:29:31,945 INFO L87 Difference]: Start difference. First operand 27550 states and 49504 transitions. cyclomatic complexity: 21960 Second operand has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:32,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:32,276 INFO L93 Difference]: Finished difference Result 45418 states and 82205 transitions. [2021-12-07 00:29:32,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-07 00:29:32,277 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45418 states and 82205 transitions. [2021-12-07 00:29:32,422 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 25114 [2021-12-07 00:29:32,529 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45418 states to 45418 states and 82205 transitions. [2021-12-07 00:29:32,529 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28704 [2021-12-07 00:29:32,547 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28704 [2021-12-07 00:29:32,547 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45418 states and 82205 transitions. [2021-12-07 00:29:32,547 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:32,547 INFO L681 BuchiCegarLoop]: Abstraction has 45418 states and 82205 transitions. [2021-12-07 00:29:32,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45418 states and 82205 transitions. [2021-12-07 00:29:32,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45418 to 27486. [2021-12-07 00:29:32,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27486 states, 27486 states have (on average 1.7964054427708651) internal successors, (49376), 27485 states have internal predecessors, (49376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:32,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27486 states to 27486 states and 49376 transitions. [2021-12-07 00:29:32,837 INFO L704 BuchiCegarLoop]: Abstraction has 27486 states and 49376 transitions. [2021-12-07 00:29:32,837 INFO L587 BuchiCegarLoop]: Abstraction has 27486 states and 49376 transitions. [2021-12-07 00:29:32,837 INFO L425 BuchiCegarLoop]: ======== Iteration 22============ [2021-12-07 00:29:32,837 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27486 states and 49376 transitions. [2021-12-07 00:29:32,893 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14526 [2021-12-07 00:29:32,894 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:32,894 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:32,897 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:32,897 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:32,897 INFO L791 eck$LassoCheckResult]: Stem: 1679220#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1679221#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1680836#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1680748#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1679568#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1679194#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1678888#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1678889#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1680030#L467 assume !(0 == getOrigin_~person#1); 1679336#L471 assume !(1 == getOrigin_~person#1); 1679337#L475 assume !(2 == getOrigin_~person#1); 1679059#L479 assume !(3 == getOrigin_~person#1); 1679060#L483 assume !(4 == getOrigin_~person#1); 1679184#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1680058#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1680455#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1679168#L3095 assume 1 == initPersonOnFloor_~floor#1; 1679169#L3096 assume !(0 == initPersonOnFloor_~person#1); 1680801#L3099 assume !(1 == initPersonOnFloor_~person#1); 1678716#L3102 assume !(2 == initPersonOnFloor_~person#1); 1678717#L3105 assume !(3 == initPersonOnFloor_~person#1); 1680988#L3108 assume !(4 == initPersonOnFloor_~person#1); 1681045#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1680387#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1679301#L2860 assume !(0 == callOnFloor_~floorID#1); 1679302#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1680301#L2872-2 assume { :end_inline_callOnFloor } true; 1680922#L3212 assume { :end_inline_initPersonOnFloor } true; 1679641#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1679642#L2797 assume !(0 == isFloorCalling_~floorID#1); 1680313#L2801 assume !(1 == isFloorCalling_~floorID#1); 1678882#L2805 assume !(2 == isFloorCalling_~floorID#1); 1678758#L2809 assume !(3 == isFloorCalling_~floorID#1); 1678759#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1679147#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1678957#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1678091#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1678092#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1679253#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1680026#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1677760#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1677761#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1678077#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1678078#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1681005#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1681046#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1680925#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1679269#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1677534#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1677535#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1679958#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1680183#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1679753#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1677953#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1677954#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1681152#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1678161#L1348 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1678162#L1517 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1678204#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1678205#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1680396#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1678112#L1753 assume !(1 == ~currentHeading~0); 1678113#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1680237#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1680717#L1769-1 assume { :end_inline_continueInDirection } true; 1680718#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1680663#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1680664#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1687986#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1687987#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1687988#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1678393#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1677582#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1679446#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1680071#L207-2 assume !false; 1690454#L208 [2021-12-07 00:29:32,898 INFO L793 eck$LassoCheckResult]: Loop: 1690454#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1700039#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1697953#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1696833#L215 assume 1 != cleanup_~tmp___0~0#1; 1696156#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1696154#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1696152#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1696147#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1696137#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1696114#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1696112#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1696111#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1696110#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1696109#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1696108#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1696107#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1696106#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1696105#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1696104#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1696103#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1696100#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1696097#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1696078#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1696076#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1695953#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1695949#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1695947#L2057-3 assume !(1 == ~doorState~0); 1695945#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1695944#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1695943#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1695942#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1695941#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1695940#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1695939#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1695938#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1695937#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1695934#L1348-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1695930#L1517-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1677815#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1696506#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1696504#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1696505#L1753-3 assume !(1 == ~currentHeading~0); 1700279#L1763-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1700280#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1692898#L1769-7 assume { :end_inline_continueInDirection } true; 1692849#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1692841#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1692836#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692833#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692826#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692823#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692820#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1692816#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1692811#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1692801#L207-2 assume !false; 1692793#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1692787#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1692783#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1692779#L215 assume 1 != cleanup_~tmp___0~0#1; 1692739#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1692737#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1692735#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1692730#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1692595#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1692593#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1692592#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1692591#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1692590#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1692589#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1692588#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1692587#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1692586#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1692585#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1692584#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1692583#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1692580#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1692575#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1692543#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1692468#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1692469#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1692457#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1692458#L2057-3 assume !(1 == ~doorState~0); 1690679#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1690680#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1690671#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1690672#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1690663#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1690664#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1690613#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1690614#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1690653#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1690654#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1692494#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1692495#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1692480#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1692459#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1692452#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1690646#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1690647#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1690634#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1690635#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1690630#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1690631#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1690626#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1690627#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1690622#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1690623#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1690617#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1690619#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1700088#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1700076#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1700074#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1700073#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1700072#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1700071#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1700069#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1700068#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1700067#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1700066#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1700065#L1769-9 assume { :end_inline_continueInDirection } true; 1700064#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1700063#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1700062#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1700058#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1700056#L2609-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1700052#L1153-6 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1700044#L2613-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1700042#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1700041#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1700040#L207-2 assume !false; 1690454#L208 [2021-12-07 00:29:32,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:32,898 INFO L85 PathProgramCache]: Analyzing trace with hash -225432430, now seen corresponding path program 1 times [2021-12-07 00:29:32,898 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:32,898 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2068175081] [2021-12-07 00:29:32,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:32,899 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:32,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:32,930 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:32,930 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:32,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2068175081] [2021-12-07 00:29:32,931 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2068175081] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:32,931 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:32,931 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:32,931 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1534964647] [2021-12-07 00:29:32,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:32,931 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:32,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:32,932 INFO L85 PathProgramCache]: Analyzing trace with hash -1966831184, now seen corresponding path program 1 times [2021-12-07 00:29:32,932 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:32,932 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1160905393] [2021-12-07 00:29:32,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:32,932 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:32,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:32,961 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2021-12-07 00:29:32,961 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:32,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1160905393] [2021-12-07 00:29:32,961 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1160905393] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:32,961 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:32,961 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:32,962 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [318955833] [2021-12-07 00:29:32,962 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:32,962 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:32,962 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:32,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 00:29:32,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 00:29:32,962 INFO L87 Difference]: Start difference. First operand 27486 states and 49376 transitions. cyclomatic complexity: 21896 Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:33,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:33,271 INFO L93 Difference]: Finished difference Result 58657 states and 105883 transitions. [2021-12-07 00:29:33,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-07 00:29:33,271 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58657 states and 105883 transitions. [2021-12-07 00:29:33,469 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 33248 [2021-12-07 00:29:33,617 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58657 states to 58627 states and 105841 transitions. [2021-12-07 00:29:33,617 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 36893 [2021-12-07 00:29:33,640 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 36899 [2021-12-07 00:29:33,641 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58627 states and 105841 transitions. [2021-12-07 00:29:33,641 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:33,641 INFO L681 BuchiCegarLoop]: Abstraction has 58627 states and 105841 transitions. [2021-12-07 00:29:33,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58627 states and 105841 transitions. [2021-12-07 00:29:33,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58627 to 26711. [2021-12-07 00:29:33,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26711 states, 26711 states have (on average 1.796413462618397) internal successors, (47984), 26710 states have internal predecessors, (47984), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:33,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26711 states to 26711 states and 47984 transitions. [2021-12-07 00:29:33,974 INFO L704 BuchiCegarLoop]: Abstraction has 26711 states and 47984 transitions. [2021-12-07 00:29:33,974 INFO L587 BuchiCegarLoop]: Abstraction has 26711 states and 47984 transitions. [2021-12-07 00:29:33,974 INFO L425 BuchiCegarLoop]: ======== Iteration 23============ [2021-12-07 00:29:33,974 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26711 states and 47984 transitions. [2021-12-07 00:29:34,030 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 13998 [2021-12-07 00:29:34,030 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:34,030 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:34,034 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:34,034 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:34,034 INFO L791 eck$LassoCheckResult]: Stem: 1765387#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1765388#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1767003#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1766912#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1765734#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1765361#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1765060#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1765061#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1766208#L467 assume !(0 == getOrigin_~person#1); 1765505#L471 assume !(1 == getOrigin_~person#1); 1765506#L475 assume !(2 == getOrigin_~person#1); 1765222#L479 assume !(3 == getOrigin_~person#1); 1765223#L483 assume !(4 == getOrigin_~person#1); 1765349#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1766240#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1766629#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1765336#L3095 assume 1 == initPersonOnFloor_~floor#1; 1765337#L3096 assume !(0 == initPersonOnFloor_~person#1); 1766965#L3099 assume !(1 == initPersonOnFloor_~person#1); 1764881#L3102 assume !(2 == initPersonOnFloor_~person#1); 1764882#L3105 assume !(3 == initPersonOnFloor_~person#1); 1767172#L3108 assume !(4 == initPersonOnFloor_~person#1); 1767224#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1766562#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1765470#L2860 assume !(0 == callOnFloor_~floorID#1); 1765471#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1766478#L2872-2 assume { :end_inline_callOnFloor } true; 1767094#L3212 assume { :end_inline_initPersonOnFloor } true; 1765806#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1765807#L2797 assume !(0 == isFloorCalling_~floorID#1); 1766486#L2801 assume !(1 == isFloorCalling_~floorID#1); 1765054#L2805 assume !(2 == isFloorCalling_~floorID#1); 1764923#L2809 assume !(3 == isFloorCalling_~floorID#1); 1764924#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1765315#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1765128#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1764251#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1764252#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1765423#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1766205#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1763923#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1763924#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1764243#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1764244#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1767185#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1767227#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1767097#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1765439#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1763698#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1763699#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1766136#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1766364#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1765914#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1764117#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1764118#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1767326#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1764321#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1764322#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1766919#L1352 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1764367#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1764368#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1766569#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1764273#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1763813#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1763814#L1757 assume !(0 != continueInDirection_~tmp~17#1); 1767403#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1767409#L1769-1 assume { :end_inline_continueInDirection } true; 1770662#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1770660#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1770655#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1770650#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1770649#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1770648#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1770393#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1770375#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1770367#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1770336#L207-2 assume !false; 1770337#L208 [2021-12-07 00:29:34,034 INFO L793 eck$LassoCheckResult]: Loop: 1770337#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1786113#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1786111#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1786109#L215 assume 1 != cleanup_~tmp___0~0#1; 1786107#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1786105#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1786094#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1786087#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1786078#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1786077#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1786076#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1786075#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1786074#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1786073#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1786072#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1784508#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1784507#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1784506#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1781637#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1778875#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1778876#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1778874#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1778853#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1778851#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1778849#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1778846#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1778845#L2057-3 assume !(1 == ~doorState~0); 1778843#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1778842#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1778841#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1778840#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1778838#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1778836#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1778834#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1777160#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1777010#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1777009#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1777007#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1776723#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1776716#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1776710#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1776711#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1776752#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1776851#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1776581#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 1776578#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1776576#L1769-7 assume { :end_inline_continueInDirection } true; 1776544#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1776543#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1776542#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1776541#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1776539#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1776536#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1776534#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1776533#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1776532#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1776529#L207-2 assume !false; 1776526#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1776525#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1776523#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1776521#L215 assume 1 != cleanup_~tmp___0~0#1; 1776517#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1776515#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1776513#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1776480#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1776470#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1776468#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1776466#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1776464#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1776462#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1776460#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1776458#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1776456#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1776454#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1776452#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1776450#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1776444#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1776445#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1776443#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1776437#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1776426#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1781610#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1781608#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1767515#L2057-3 assume !(1 == ~doorState~0); 1767512#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1767511#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1767510#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1767509#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1767508#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1767507#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1767505#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1767501#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1767502#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1776848#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1776849#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1780972#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1766090#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1780967#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1780965#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1780963#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1780961#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1780959#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1780957#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1780955#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1780953#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1780951#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1780949#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1780947#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1780945#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1780943#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1780944#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1785350#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1785121#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1786145#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1786144#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1786143#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1786142#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1786141#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1776601#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1776602#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1786140#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1786139#L1769-9 assume { :end_inline_continueInDirection } true; 1786138#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1786137#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1786136#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1786132#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1786130#L2609-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1786126#L1153-6 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1786118#L2613-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1786116#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1786115#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1786114#L207-2 assume !false; 1770337#L208 [2021-12-07 00:29:34,035 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:34,035 INFO L85 PathProgramCache]: Analyzing trace with hash -849067296, now seen corresponding path program 1 times [2021-12-07 00:29:34,035 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:34,035 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1526973387] [2021-12-07 00:29:34,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:34,035 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:34,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:34,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:34,059 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:34,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1526973387] [2021-12-07 00:29:34,059 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1526973387] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:34,060 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:34,060 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:29:34,060 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [784531488] [2021-12-07 00:29:34,060 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:34,060 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:34,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:34,060 INFO L85 PathProgramCache]: Analyzing trace with hash 877389508, now seen corresponding path program 1 times [2021-12-07 00:29:34,060 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:34,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [284958970] [2021-12-07 00:29:34,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:34,060 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:34,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:34,088 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2021-12-07 00:29:34,088 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:34,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [284958970] [2021-12-07 00:29:34,088 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [284958970] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:34,088 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:34,088 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:34,088 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1086745295] [2021-12-07 00:29:34,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:34,089 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:34,089 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:34,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 00:29:34,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 00:29:34,089 INFO L87 Difference]: Start difference. First operand 26711 states and 47984 transitions. cyclomatic complexity: 21279 Second operand has 5 states, 5 states have (on average 15.4) internal successors, (77), 5 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:34,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:34,290 INFO L93 Difference]: Finished difference Result 43862 states and 78499 transitions. [2021-12-07 00:29:34,290 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-07 00:29:34,290 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 43862 states and 78499 transitions. [2021-12-07 00:29:34,458 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 24250 [2021-12-07 00:29:34,538 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 43862 states to 43862 states and 78499 transitions. [2021-12-07 00:29:34,538 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27818 [2021-12-07 00:29:34,550 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27818 [2021-12-07 00:29:34,550 INFO L73 IsDeterministic]: Start isDeterministic. Operand 43862 states and 78499 transitions. [2021-12-07 00:29:34,551 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:34,551 INFO L681 BuchiCegarLoop]: Abstraction has 43862 states and 78499 transitions. [2021-12-07 00:29:34,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43862 states and 78499 transitions. [2021-12-07 00:29:34,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43862 to 26802. [2021-12-07 00:29:34,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26802 states, 26802 states have (on average 1.7934109394821283) internal successors, (48067), 26801 states have internal predecessors, (48067), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:34,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26802 states to 26802 states and 48067 transitions. [2021-12-07 00:29:34,817 INFO L704 BuchiCegarLoop]: Abstraction has 26802 states and 48067 transitions. [2021-12-07 00:29:34,817 INFO L587 BuchiCegarLoop]: Abstraction has 26802 states and 48067 transitions. [2021-12-07 00:29:34,817 INFO L425 BuchiCegarLoop]: ======== Iteration 24============ [2021-12-07 00:29:34,817 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26802 states and 48067 transitions. [2021-12-07 00:29:34,874 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14036 [2021-12-07 00:29:34,874 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:34,874 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:34,877 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:34,877 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:34,878 INFO L791 eck$LassoCheckResult]: Stem: 1835970#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1835971#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1837530#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1837450#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1836312#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1835944#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1835639#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1835640#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1836775#L467 assume !(0 == getOrigin_~person#1); 1836083#L471 assume !(1 == getOrigin_~person#1); 1836084#L475 assume !(2 == getOrigin_~person#1); 1835804#L479 assume !(3 == getOrigin_~person#1); 1835805#L483 assume !(4 == getOrigin_~person#1); 1835932#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1836805#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1837186#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1835919#L3095 assume 1 == initPersonOnFloor_~floor#1; 1835920#L3096 assume !(0 == initPersonOnFloor_~person#1); 1837499#L3099 assume !(1 == initPersonOnFloor_~person#1); 1835470#L3102 assume !(2 == initPersonOnFloor_~person#1); 1835471#L3105 assume !(3 == initPersonOnFloor_~person#1); 1837685#L3108 assume !(4 == initPersonOnFloor_~person#1); 1837736#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1837126#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1836048#L2860 assume !(0 == callOnFloor_~floorID#1); 1836049#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1837041#L2872-2 assume { :end_inline_callOnFloor } true; 1837612#L3212 assume { :end_inline_initPersonOnFloor } true; 1836388#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1836389#L2797 assume !(0 == isFloorCalling_~floorID#1); 1837054#L2801 assume !(1 == isFloorCalling_~floorID#1); 1835633#L2805 assume !(2 == isFloorCalling_~floorID#1); 1835507#L2809 assume !(3 == isFloorCalling_~floorID#1); 1835508#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1835898#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1835710#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1834841#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1834842#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1836002#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1836772#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1834514#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1834515#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1834833#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1834834#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1837697#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1837739#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1837615#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1836017#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1834290#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1834291#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1836706#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1836930#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1836494#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1834707#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1834708#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1837832#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1834910#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1834911#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1837457#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 1837155#L1358 assume !(~currentFloorID~0 < 0); 1836412#L1373 assume !(~currentFloorID~0 < 0); 1835410#L1386 assume ~currentFloorID~0 < 1; 1835411#L1388 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1835465#L2797-5 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1834781#L2824-5 stopRequestedInDirection__wrappee__empty_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret50#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret50#1; 1835376#L1392 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1835377#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1837916#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1837914#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1834863#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1834405#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1834406#L1757 assume !(0 != continueInDirection_~tmp~17#1); 1837907#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1837421#L1769-1 assume { :end_inline_continueInDirection } true; 1835526#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1835527#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1835747#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1835749#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1834651#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1834652#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1835138#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1834338#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1836190#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1836818#L207-2 assume !false; 1836492#L208 [2021-12-07 00:29:34,878 INFO L793 eck$LassoCheckResult]: Loop: 1836492#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1835121#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1835122#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1836780#L215 assume 1 != cleanup_~tmp___0~0#1; 1836781#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1836600#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1836601#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1837756#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1835115#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1836776#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1858693#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1858692#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1858690#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1858688#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1858682#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1858679#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1858675#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1858671#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1858667#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1858663#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1858520#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1858510#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1858500#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1858101#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1851023#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1851024#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1856733#L2057-3 assume !(1 == ~doorState~0); 1856720#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1856708#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1856503#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1856486#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1856483#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1856423#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1856301#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1856300#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1856265#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1856264#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1856263#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1856262#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 1856260#L1358-2 assume ~currentFloorID~0 < 0; 1856259#L1359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1856258#L2797-34 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1856257#L2824-34 stopRequestedInDirection__wrappee__empty_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___4~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret49#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret49#1; 1856251#L1363-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1856142#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1856143#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1851039#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1851036#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1851031#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1851028#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 1847813#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1847811#L1769-7 assume { :end_inline_continueInDirection } true; 1847809#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1847808#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1847807#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1847806#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1847805#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1847804#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1847803#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1847798#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1847796#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1847795#L207-2 assume !false; 1847794#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1847793#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1847792#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1847791#L215 assume 1 != cleanup_~tmp___0~0#1; 1847790#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1847785#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1847783#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1847768#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1847759#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1847067#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1838318#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1838316#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1838314#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1838312#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1838310#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1838308#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1838306#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1838304#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1838302#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1838299#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1838300#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1838298#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1838293#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1838159#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1838157#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1838152#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1838154#L2057-3 assume !(1 == ~doorState~0); 1844528#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1844527#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1838139#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1838138#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1838037#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1838018#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1838019#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1838007#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1837995#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1837993#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1837994#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1853055#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1836662#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1860192#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1860191#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1860190#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1860189#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1860188#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1860187#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1860186#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1860169#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1860132#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1860127#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1860122#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1860046#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1860040#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1860029#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1859989#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1859973#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1859903#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1848016#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1848017#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1860574#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1851021#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1851022#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1850571#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1850572#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1860749#L1769-9 assume { :end_inline_continueInDirection } true; 1860748#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1860747#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1860746#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1860742#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1860731#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1860736#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1860734#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1834716#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1834717#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1836978#L207-2 assume !false; 1836492#L208 [2021-12-07 00:29:34,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:34,878 INFO L85 PathProgramCache]: Analyzing trace with hash 1422110289, now seen corresponding path program 1 times [2021-12-07 00:29:34,878 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:34,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1491997945] [2021-12-07 00:29:34,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:34,879 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:34,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:34,906 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:34,906 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:34,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1491997945] [2021-12-07 00:29:34,906 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1491997945] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:34,906 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:34,906 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:29:34,906 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1761540604] [2021-12-07 00:29:34,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:34,906 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:34,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:34,907 INFO L85 PathProgramCache]: Analyzing trace with hash 857184011, now seen corresponding path program 1 times [2021-12-07 00:29:34,907 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:34,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1358527477] [2021-12-07 00:29:34,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:34,907 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:34,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:34,932 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-07 00:29:34,932 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:34,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1358527477] [2021-12-07 00:29:34,932 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1358527477] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:34,932 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:34,933 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:34,933 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1713274748] [2021-12-07 00:29:34,933 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:34,933 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:34,933 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:34,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 00:29:34,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 00:29:34,934 INFO L87 Difference]: Start difference. First operand 26802 states and 48067 transitions. cyclomatic complexity: 21271 Second operand has 5 states, 5 states have (on average 16.8) internal successors, (84), 5 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:35,216 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:35,216 INFO L93 Difference]: Finished difference Result 42722 states and 77176 transitions. [2021-12-07 00:29:35,216 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-07 00:29:35,217 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42722 states and 77176 transitions. [2021-12-07 00:29:35,352 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 23696 [2021-12-07 00:29:35,454 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42722 states to 42722 states and 77176 transitions. [2021-12-07 00:29:35,454 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27015 [2021-12-07 00:29:35,471 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27015 [2021-12-07 00:29:35,471 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42722 states and 77176 transitions. [2021-12-07 00:29:35,473 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:35,473 INFO L681 BuchiCegarLoop]: Abstraction has 42722 states and 77176 transitions. [2021-12-07 00:29:35,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42722 states and 77176 transitions. [2021-12-07 00:29:35,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42722 to 26802. [2021-12-07 00:29:35,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26802 states, 26802 states have (on average 1.7817700171628983) internal successors, (47755), 26801 states have internal predecessors, (47755), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:35,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26802 states to 26802 states and 47755 transitions. [2021-12-07 00:29:35,753 INFO L704 BuchiCegarLoop]: Abstraction has 26802 states and 47755 transitions. [2021-12-07 00:29:35,753 INFO L587 BuchiCegarLoop]: Abstraction has 26802 states and 47755 transitions. [2021-12-07 00:29:35,753 INFO L425 BuchiCegarLoop]: ======== Iteration 25============ [2021-12-07 00:29:35,753 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26802 states and 47755 transitions. [2021-12-07 00:29:35,809 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14036 [2021-12-07 00:29:35,809 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:35,809 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:35,813 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:35,813 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:35,813 INFO L791 eck$LassoCheckResult]: Stem: 1905523#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1905524#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1907104#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1907018#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1905864#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1905496#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1905186#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1905187#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1906325#L467 assume !(0 == getOrigin_~person#1); 1905634#L471 assume !(1 == getOrigin_~person#1); 1905635#L475 assume !(2 == getOrigin_~person#1); 1905363#L479 assume !(3 == getOrigin_~person#1); 1905364#L483 assume !(4 == getOrigin_~person#1); 1905486#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1906351#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1906744#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1905470#L3095 assume 1 == initPersonOnFloor_~floor#1; 1905471#L3096 assume !(0 == initPersonOnFloor_~person#1); 1907073#L3099 assume !(1 == initPersonOnFloor_~person#1); 1905012#L3102 assume !(2 == initPersonOnFloor_~person#1); 1905013#L3105 assume !(3 == initPersonOnFloor_~person#1); 1907252#L3108 assume !(4 == initPersonOnFloor_~person#1); 1907310#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1906678#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1905599#L2860 assume !(0 == callOnFloor_~floorID#1); 1905600#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1906590#L2872-2 assume { :end_inline_callOnFloor } true; 1907183#L3212 assume { :end_inline_initPersonOnFloor } true; 1905937#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1905938#L2797 assume !(0 == isFloorCalling_~floorID#1); 1906600#L2801 assume !(1 == isFloorCalling_~floorID#1); 1905180#L2805 assume !(2 == isFloorCalling_~floorID#1); 1905055#L2809 assume !(3 == isFloorCalling_~floorID#1); 1905056#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1905449#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1905258#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1904385#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1904386#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1905554#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1906320#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1904053#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1904054#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1904371#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1904372#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1907270#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1907311#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1907186#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1905568#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1903832#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1903833#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1906256#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1906475#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1906050#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1904244#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1904245#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1907427#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1904454#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1904455#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1907028#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 1906711#L1358 assume !(~currentFloorID~0 < 0); 1905963#L1373 assume !(~currentFloorID~0 < 0); 1904956#L1386 assume ~currentFloorID~0 < 1; 1904957#L1388 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1); 1904921#L1402 assume ~currentFloorID~0 < 1; 1906837#L1404 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 1906943#L1405 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1904920#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1907504#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1907502#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1904407#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1903945#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1903946#L1757 assume !(0 != continueInDirection_~tmp~17#1); 1907499#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1907505#L1769-1 assume { :end_inline_continueInDirection } true; 1907515#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1907516#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1905303#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1905305#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1912097#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1912094#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1912087#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1912083#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1912082#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1912080#L207-2 assume !false; 1912081#L208 [2021-12-07 00:29:35,813 INFO L793 eck$LassoCheckResult]: Loop: 1912081#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1920804#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1920800#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1920791#L215 assume 1 != cleanup_~tmp___0~0#1; 1920780#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1920778#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1920767#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1920760#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1920748#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1920741#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1920731#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1920730#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1920729#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1920728#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1920727#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1920726#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1920725#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1920724#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1920723#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1920722#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1920719#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1920716#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1920713#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1920674#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1919007#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1918907#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1918883#L2057-3 assume !(1 == ~doorState~0); 1918766#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1918764#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1918763#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1918761#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1918758#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1918756#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1918754#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1918752#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1918749#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1918748#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1918738#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1918690#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 1918691#L1358-2 assume ~currentFloorID~0 < 0; 1918797#L1359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1918857#L2797-34 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1918846#L2824-34 stopRequestedInDirection__wrappee__empty_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___4~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret49#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret49#1; 1918839#L1363-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1918542#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1918538#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1918518#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1918516#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1918514#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1918511#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 1918506#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1918503#L1769-7 assume { :end_inline_continueInDirection } true; 1918501#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1918500#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1918499#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1918498#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1918497#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1918496#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1918495#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1918494#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1918493#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1918492#L207-2 assume !false; 1918491#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1918487#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1918455#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1918453#L215 assume 1 != cleanup_~tmp___0~0#1; 1918079#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1918077#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1918066#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1918059#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1918047#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1918045#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1917183#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1917184#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1917147#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1917148#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1916841#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1916842#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1916749#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1916750#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1916740#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1916741#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1916724#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1916722#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1916712#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1916591#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1916589#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1916587#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1916584#L2057-3 assume !(1 == ~doorState~0); 1916579#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1916580#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1916553#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1916554#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1916532#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1916533#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1916528#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1916529#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1916453#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1916454#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1921224#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1921223#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1921193#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1921585#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1921178#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1921176#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1921175#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1921174#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1921172#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1921170#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1921167#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1921164#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1921161#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1921156#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1921147#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1921141#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1921128#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1921114#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1921101#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1921099#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1921097#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1921095#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1921093#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1920915#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1920913#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1920912#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1920911#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1920904#L1769-9 assume { :end_inline_continueInDirection } true; 1920896#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1920880#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1920877#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1920873#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1920845#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1920850#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1920848#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1920841#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1920839#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1920821#L207-2 assume !false; 1912081#L208 [2021-12-07 00:29:35,814 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:35,814 INFO L85 PathProgramCache]: Analyzing trace with hash 1499821332, now seen corresponding path program 1 times [2021-12-07 00:29:35,814 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:35,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [103344985] [2021-12-07 00:29:35,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:35,814 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:35,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:35,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:35,843 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:35,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [103344985] [2021-12-07 00:29:35,843 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [103344985] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:35,843 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:35,843 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 00:29:35,843 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [529322392] [2021-12-07 00:29:35,843 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:35,844 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:35,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:35,844 INFO L85 PathProgramCache]: Analyzing trace with hash 857184011, now seen corresponding path program 2 times [2021-12-07 00:29:35,844 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:35,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955700] [2021-12-07 00:29:35,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:35,844 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:35,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:35,872 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-07 00:29:35,872 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:35,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [955700] [2021-12-07 00:29:35,872 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [955700] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:35,872 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:35,873 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:35,873 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [518391478] [2021-12-07 00:29:35,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:35,873 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:35,873 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:35,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:29:35,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:29:35,873 INFO L87 Difference]: Start difference. First operand 26802 states and 47755 transitions. cyclomatic complexity: 20959 Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:36,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:36,082 INFO L93 Difference]: Finished difference Result 26802 states and 47321 transitions. [2021-12-07 00:29:36,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-07 00:29:36,083 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26802 states and 47321 transitions. [2021-12-07 00:29:36,160 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14036 [2021-12-07 00:29:36,220 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26802 states to 26802 states and 47321 transitions. [2021-12-07 00:29:36,221 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17060 [2021-12-07 00:29:36,229 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17060 [2021-12-07 00:29:36,230 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26802 states and 47321 transitions. [2021-12-07 00:29:36,230 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:36,230 INFO L681 BuchiCegarLoop]: Abstraction has 26802 states and 47321 transitions. [2021-12-07 00:29:36,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26802 states and 47321 transitions. [2021-12-07 00:29:36,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26802 to 26802. [2021-12-07 00:29:36,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26802 states, 26802 states have (on average 1.7655771957316617) internal successors, (47321), 26801 states have internal predecessors, (47321), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:36,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26802 states to 26802 states and 47321 transitions. [2021-12-07 00:29:36,451 INFO L704 BuchiCegarLoop]: Abstraction has 26802 states and 47321 transitions. [2021-12-07 00:29:36,451 INFO L587 BuchiCegarLoop]: Abstraction has 26802 states and 47321 transitions. [2021-12-07 00:29:36,452 INFO L425 BuchiCegarLoop]: ======== Iteration 26============ [2021-12-07 00:29:36,452 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26802 states and 47321 transitions. [2021-12-07 00:29:36,508 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14036 [2021-12-07 00:29:36,508 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:36,508 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:36,511 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:36,511 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:36,511 INFO L791 eck$LassoCheckResult]: Stem: 1959125#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1959126#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1960688#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1960601#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1959467#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1959100#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1958797#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1958798#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1959926#L467 assume !(0 == getOrigin_~person#1); 1959237#L471 assume !(1 == getOrigin_~person#1); 1959238#L475 assume !(2 == getOrigin_~person#1); 1958963#L479 assume !(3 == getOrigin_~person#1); 1958964#L483 assume !(4 == getOrigin_~person#1); 1959088#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1959958#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1960342#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1959075#L3095 assume 1 == initPersonOnFloor_~floor#1; 1959076#L3096 assume !(0 == initPersonOnFloor_~person#1); 1960656#L3099 assume !(1 == initPersonOnFloor_~person#1); 1958629#L3102 assume !(2 == initPersonOnFloor_~person#1); 1958630#L3105 assume !(3 == initPersonOnFloor_~person#1); 1960836#L3108 assume !(4 == initPersonOnFloor_~person#1); 1960883#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1960275#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1959202#L2860 assume !(0 == callOnFloor_~floorID#1); 1959203#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1960194#L2872-2 assume { :end_inline_callOnFloor } true; 1960764#L3212 assume { :end_inline_initPersonOnFloor } true; 1959542#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1959543#L2797 assume !(0 == isFloorCalling_~floorID#1); 1960204#L2801 assume !(1 == isFloorCalling_~floorID#1); 1958791#L2805 assume !(2 == isFloorCalling_~floorID#1); 1958666#L2809 assume !(3 == isFloorCalling_~floorID#1); 1958667#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1959054#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1958866#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1958002#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1958003#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1959156#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1959923#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1957678#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1957679#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1957994#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1957995#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1960847#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1960886#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1960768#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1959171#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1957457#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1957458#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1959859#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1960084#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1959652#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1957869#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1957870#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1960980#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1958073#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1958074#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1960608#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 1960312#L1358 assume !(~currentFloorID~0 < 0); 1959568#L1373 assume !(~currentFloorID~0 < 0); 1958569#L1386 assume ~currentFloorID~0 < 1; 1958570#L1388 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1958624#L2797-5 assume !(0 == isFloorCalling_~floorID#1); 1958117#L2801-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1957942#L2824-5 stopRequestedInDirection__wrappee__empty_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret50#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret50#1; 1958535#L1392 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1958536#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1961049#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1961047#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1958024#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1957568#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1957569#L1757 assume !(0 != continueInDirection_~tmp~17#1); 1961044#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1960571#L1769-1 assume { :end_inline_continueInDirection } true; 1960572#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1965661#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1965620#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1960214#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1965603#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1965604#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1965591#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1965576#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1965567#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1965560#L207-2 assume !false; 1965561#L208 [2021-12-07 00:29:36,512 INFO L793 eck$LassoCheckResult]: Loop: 1965561#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1983805#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1983804#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1983803#L215 assume 1 != cleanup_~tmp___0~0#1; 1983802#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1983797#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1983795#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1983780#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1983771#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1983770#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1983769#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1983768#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1983767#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1983766#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1983765#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1983764#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1983763#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1983761#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1983759#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1983757#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1983758#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1983756#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1983743#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1983742#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1983741#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1983740#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1959490#L2057-3 assume !(1 == ~doorState~0); 1959491#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1959728#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1957926#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1957927#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1958768#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1959310#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1959577#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1960407#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1960408#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1959301#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1959302#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1981722#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 1981719#L1358-2 assume ~currentFloorID~0 < 0; 1981721#L1359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1982624#L2797-34 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1982622#L2824-34 stopRequestedInDirection__wrappee__empty_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___4~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret49#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret49#1; 1981695#L1363-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1981681#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1979034#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1972071#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1972067#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1972063#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1972057#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 1972052#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1972018#L1769-7 assume { :end_inline_continueInDirection } true; 1972015#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1972009#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1972007#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1972005#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1971998#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1971996#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1971989#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1971987#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1971981#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1971980#L207-2 assume !false; 1971979#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1971978#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1971977#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1971974#L215 assume 1 != cleanup_~tmp___0~0#1; 1971972#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1971966#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1971959#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1971024#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1971014#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1971012#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1970993#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1970991#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1970989#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1970987#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1970985#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1970984#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1970983#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1970981#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1970979#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1970977#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1970978#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1970143#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1970135#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1970129#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1970127#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1970124#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1970125#L2057-3 assume !(1 == ~doorState~0); 1976634#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1976633#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1976632#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1976631#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1976630#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1976629#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1976628#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1976627#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1976626#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1976624#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1976623#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1976621#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1976529#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1976699#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1976698#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1976514#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1976697#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1976695#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1976693#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1976691#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1976689#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1976687#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1976685#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1976683#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1976682#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1976681#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1976499#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 1973091#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 1973079#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1972260#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1972075#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1972076#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1982448#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1982393#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1972261#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1972054#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1972055#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1983836#L1769-9 assume { :end_inline_continueInDirection } true; 1983835#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1983834#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1983833#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1983829#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1983811#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1983816#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1983814#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1983808#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1983807#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1983806#L207-2 assume !false; 1965561#L208 [2021-12-07 00:29:36,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:36,512 INFO L85 PathProgramCache]: Analyzing trace with hash -1269823813, now seen corresponding path program 1 times [2021-12-07 00:29:36,512 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:36,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1353264354] [2021-12-07 00:29:36,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:36,513 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:36,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:36,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:36,536 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:36,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1353264354] [2021-12-07 00:29:36,536 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1353264354] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:36,536 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:36,537 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:29:36,537 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1083589458] [2021-12-07 00:29:36,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:36,537 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:36,537 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:36,537 INFO L85 PathProgramCache]: Analyzing trace with hash 857184011, now seen corresponding path program 3 times [2021-12-07 00:29:36,537 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:36,537 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1303052595] [2021-12-07 00:29:36,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:36,537 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:36,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:36,565 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-07 00:29:36,565 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:36,565 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1303052595] [2021-12-07 00:29:36,565 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1303052595] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:36,566 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:36,566 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:36,566 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1229411817] [2021-12-07 00:29:36,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:36,566 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:36,566 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:36,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 00:29:36,566 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:29:36,566 INFO L87 Difference]: Start difference. First operand 26802 states and 47321 transitions. cyclomatic complexity: 20525 Second operand has 3 states, 3 states have (on average 28.333333333333332) internal successors, (85), 3 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:36,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:36,718 INFO L93 Difference]: Finished difference Result 53034 states and 93691 transitions. [2021-12-07 00:29:36,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 00:29:36,720 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53034 states and 93691 transitions. [2021-12-07 00:29:36,901 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28040 [2021-12-07 00:29:37,035 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53034 states to 53034 states and 93691 transitions. [2021-12-07 00:29:37,036 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33570 [2021-12-07 00:29:37,057 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33570 [2021-12-07 00:29:37,057 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53034 states and 93691 transitions. [2021-12-07 00:29:37,058 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:37,058 INFO L681 BuchiCegarLoop]: Abstraction has 53034 states and 93691 transitions. [2021-12-07 00:29:37,083 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53034 states and 93691 transitions. [2021-12-07 00:29:37,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53034 to 53034. [2021-12-07 00:29:37,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53034 states, 53034 states have (on average 1.766621412678659) internal successors, (93691), 53033 states have internal predecessors, (93691), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:37,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53034 states to 53034 states and 93691 transitions. [2021-12-07 00:29:37,530 INFO L704 BuchiCegarLoop]: Abstraction has 53034 states and 93691 transitions. [2021-12-07 00:29:37,530 INFO L587 BuchiCegarLoop]: Abstraction has 53034 states and 93691 transitions. [2021-12-07 00:29:37,530 INFO L425 BuchiCegarLoop]: ======== Iteration 27============ [2021-12-07 00:29:37,530 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53034 states and 93691 transitions. [2021-12-07 00:29:37,651 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28040 [2021-12-07 00:29:37,651 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:37,651 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:37,657 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:37,657 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:37,657 INFO L791 eck$LassoCheckResult]: Stem: 2038993#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2038994#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2040581#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2040490#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 2039339#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2038966#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2038655#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 2038656#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 2039807#L467 assume !(0 == getOrigin_~person#1); 2039108#L471 assume !(1 == getOrigin_~person#1); 2039109#L475 assume !(2 == getOrigin_~person#1); 2038831#L479 assume !(3 == getOrigin_~person#1); 2038832#L483 assume !(4 == getOrigin_~person#1); 2038954#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 2039840#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2040224#L3068 assume !(0 == initPersonOnFloor_~floor#1); 2038941#L3095 assume 1 == initPersonOnFloor_~floor#1; 2038942#L3096 assume !(0 == initPersonOnFloor_~person#1); 2040546#L3099 assume !(1 == initPersonOnFloor_~person#1); 2038485#L3102 assume !(2 == initPersonOnFloor_~person#1); 2038486#L3105 assume !(3 == initPersonOnFloor_~person#1); 2040739#L3108 assume !(4 == initPersonOnFloor_~person#1); 2040785#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2040161#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2039073#L2860 assume !(0 == callOnFloor_~floorID#1); 2039074#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2040081#L2872-2 assume { :end_inline_callOnFloor } true; 2040664#L3212 assume { :end_inline_initPersonOnFloor } true; 2039413#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2039414#L2797 assume !(0 == isFloorCalling_~floorID#1); 2040089#L2801 assume !(1 == isFloorCalling_~floorID#1); 2038649#L2805 assume !(2 == isFloorCalling_~floorID#1); 2038523#L2809 assume !(3 == isFloorCalling_~floorID#1); 2038524#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2038920#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2038728#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2037849#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2037850#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2039026#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2039804#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2037526#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2037527#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 2037841#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2037842#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2040751#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2040789#L1966 assume !(0 != timeShift_~tmp___9~2#1); 2040667#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 2039042#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2037304#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 2037305#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 2039737#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 2039966#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 2039522#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2037717#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2037718#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2040894#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2037920#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2037921#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2040497#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 2040192#L1358 assume !(~currentFloorID~0 < 0); 2039439#L1373 assume !(~currentFloorID~0 < 0); 2038424#L1386 assume ~currentFloorID~0 < 1; 2038425#L1388 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2038480#L2797-5 assume !(0 == isFloorCalling_~floorID#1); 2037964#L2801-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2037789#L2824-5 stopRequestedInDirection__wrappee__empty_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret50#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret50#1; 2038390#L1392 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2038391#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2040969#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2040968#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2037871#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2037415#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2037416#L1757 assume !(0 != continueInDirection_~tmp~17#1); 2040965#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2040458#L1769-1 assume { :end_inline_continueInDirection } true; 2040459#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2040413#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2040414#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2040100#L2607 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 2038093#L2622 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2037388#L2637 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2039661#L2652 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2039217#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2039218#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2060606#L207-2 assume !false; 2060607#L208 [2021-12-07 00:29:37,657 INFO L793 eck$LassoCheckResult]: Loop: 2060607#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2073478#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2073477#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2073476#L215 assume 1 != cleanup_~tmp___0~0#1; 2073475#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2073473#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2073471#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2070788#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2070776#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2070752#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2070746#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2070732#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 2070730#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 2070728#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 2070726#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 2070724#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2070722#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2070720#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2070717#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2070715#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 2070703#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2070689#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2070682#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2070677#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2070675#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2070673#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 2070670#L2057-3 assume !(1 == ~doorState~0); 2070668#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2070667#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 2070666#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 2070665#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 2070664#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 2070663#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2070662#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2070657#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2070652#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2070644#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2070587#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2070551#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 2070552#L1358-2 assume ~currentFloorID~0 < 0; 2070641#L1359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2070634#L2797-34 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2070623#L2824-34 stopRequestedInDirection__wrappee__empty_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___4~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret49#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret49#1; 2070581#L1363-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2070550#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2070547#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2061121#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2061116#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2061111#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2061102#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 2061093#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2061067#L1769-7 assume { :end_inline_continueInDirection } true; 2061065#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2061064#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2061063#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2061048#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 2061042#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2061041#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2061040#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2061039#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2061038#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2061037#L207-2 assume !false; 2061032#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2061030#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2061029#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2061028#L215 assume 1 != cleanup_~tmp___0~0#1; 2061027#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2061026#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2061025#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2061009#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2060999#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2060997#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2060995#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2060979#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 2060973#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 2060969#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 2060965#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 2060961#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2060956#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2060952#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2060948#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2060941#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 2060942#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2060884#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2060885#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2060870#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2060868#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2060865#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 2060866#L2057-3 assume !(1 == ~doorState~0); 2078351#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2078350#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 2078349#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 2078347#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 2078343#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 2078341#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2078337#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2078333#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2078324#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2078301#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2078296#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2078275#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2078276#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2079535#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2073618#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2073617#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2073616#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2073614#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 2073613#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 2073611#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 2073609#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 2073608#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2073603#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2073601#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2073600#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2073598#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2073597#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2073572#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2073558#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2073557#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 2073555#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2073554#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2073553#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2073521#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2073519#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2073518#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 2073517#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2073516#L1769-9 assume { :end_inline_continueInDirection } true; 2073515#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2073514#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2073513#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2073504#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 2072867#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2073486#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2073484#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2072858#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2073480#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2073479#L207-2 assume !false; 2060607#L208 [2021-12-07 00:29:37,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:37,658 INFO L85 PathProgramCache]: Analyzing trace with hash 1039220537, now seen corresponding path program 1 times [2021-12-07 00:29:37,658 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:37,658 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1958243265] [2021-12-07 00:29:37,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:37,658 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:37,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:37,759 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:29:37,759 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:37,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1958243265] [2021-12-07 00:29:37,759 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1958243265] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:37,759 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:37,759 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:29:37,759 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [88064044] [2021-12-07 00:29:37,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:37,760 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-07 00:29:37,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:37,760 INFO L85 PathProgramCache]: Analyzing trace with hash 857184011, now seen corresponding path program 4 times [2021-12-07 00:29:37,760 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:37,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [365119869] [2021-12-07 00:29:37,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:37,760 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:37,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:37,793 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-07 00:29:37,793 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:37,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [365119869] [2021-12-07 00:29:37,794 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [365119869] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:37,794 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:37,794 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:37,794 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [72765557] [2021-12-07 00:29:37,794 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:37,794 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:37,795 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:37,795 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:29:37,795 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:29:37,795 INFO L87 Difference]: Start difference. First operand 53034 states and 93691 transitions. cyclomatic complexity: 40663 Second operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 5 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:38,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:38,727 INFO L93 Difference]: Finished difference Result 141216 states and 248482 transitions. [2021-12-07 00:29:38,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-07 00:29:38,728 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 141216 states and 248482 transitions. [2021-12-07 00:29:39,207 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 80084 [2021-12-07 00:29:39,560 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 141216 states to 141148 states and 248414 transitions. [2021-12-07 00:29:39,561 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 90024 [2021-12-07 00:29:39,619 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 90036 [2021-12-07 00:29:39,619 INFO L73 IsDeterministic]: Start isDeterministic. Operand 141148 states and 248414 transitions. [2021-12-07 00:29:39,620 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:39,620 INFO L681 BuchiCegarLoop]: Abstraction has 141148 states and 248414 transitions. [2021-12-07 00:29:39,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 141148 states and 248414 transitions. [2021-12-07 00:29:40,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 141148 to 86985. [2021-12-07 00:29:40,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86985 states, 86985 states have (on average 1.7681669253319539) internal successors, (153804), 86984 states have internal predecessors, (153804), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:40,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86985 states to 86985 states and 153804 transitions. [2021-12-07 00:29:40,577 INFO L704 BuchiCegarLoop]: Abstraction has 86985 states and 153804 transitions. [2021-12-07 00:29:40,578 INFO L587 BuchiCegarLoop]: Abstraction has 86985 states and 153804 transitions. [2021-12-07 00:29:40,578 INFO L425 BuchiCegarLoop]: ======== Iteration 28============ [2021-12-07 00:29:40,578 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 86985 states and 153804 transitions. [2021-12-07 00:29:40,801 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 48736 [2021-12-07 00:29:40,801 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:40,801 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:40,807 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:40,807 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:40,807 INFO L791 eck$LassoCheckResult]: Stem: 2233271#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2233272#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2234914#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2234817#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 2233623#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2233247#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2232936#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 2232937#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 2234106#L467 assume !(0 == getOrigin_~person#1); 2233388#L471 assume !(1 == getOrigin_~person#1); 2233389#L475 assume !(2 == getOrigin_~person#1); 2233112#L479 assume !(3 == getOrigin_~person#1); 2233113#L483 assume !(4 == getOrigin_~person#1); 2233237#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 2234138#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2234536#L3068 assume !(0 == initPersonOnFloor_~floor#1); 2233221#L3095 assume 1 == initPersonOnFloor_~floor#1; 2233222#L3096 assume !(0 == initPersonOnFloor_~person#1); 2234876#L3099 assume !(1 == initPersonOnFloor_~person#1); 2232757#L3102 assume !(2 == initPersonOnFloor_~person#1); 2232758#L3105 assume !(3 == initPersonOnFloor_~person#1); 2235084#L3108 assume !(4 == initPersonOnFloor_~person#1); 2235133#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2234468#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2233353#L2860 assume !(0 == callOnFloor_~floorID#1); 2233354#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2234386#L2872-2 assume { :end_inline_callOnFloor } true; 2235000#L3212 assume { :end_inline_initPersonOnFloor } true; 2233697#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2233698#L2797 assume !(0 == isFloorCalling_~floorID#1); 2234395#L2801 assume !(1 == isFloorCalling_~floorID#1); 2232930#L2805 assume !(2 == isFloorCalling_~floorID#1); 2232798#L2809 assume !(3 == isFloorCalling_~floorID#1); 2232799#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2233200#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2233006#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2232129#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2232130#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2233305#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2234101#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2231799#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2231800#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 2232115#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2232116#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2235098#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2235134#L1966 assume !(0 != timeShift_~tmp___9~2#1); 2235003#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 2233320#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2231580#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 2231581#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 2234032#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 2234270#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 2233816#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2231990#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2231991#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2235249#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2232197#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2232198#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2234826#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 2234498#L1358 assume !(~currentFloorID~0 < 0); 2233726#L1373 assume !(~currentFloorID~0 < 0); 2232698#L1386 assume ~currentFloorID~0 < 1; 2232699#L1388 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2232756#L2797-5 assume !(0 == isFloorCalling_~floorID#1); 2232238#L2801-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2232063#L2824-5 stopRequestedInDirection__wrappee__empty_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret50#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret50#1; 2232660#L1392 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2232661#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2235337#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2235336#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2232149#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2231690#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2231691#L1757 assume !(0 != continueInDirection_~tmp~17#1); 2235329#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2235338#L1769-1 assume { :end_inline_continueInDirection } true; 2235985#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2235984#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2233050#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2233051#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2231934#L2609 assume !(0 != ~floorButtons_spc2_1~0); 2231935#L2622 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2235190#L2637 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2231623#L2652 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2231624#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2233501#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2234151#L207-2 assume !false; 2258711#L208 [2021-12-07 00:29:40,808 INFO L793 eck$LassoCheckResult]: Loop: 2258711#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2290497#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2290495#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2290493#L215 assume 1 != cleanup_~tmp___0~0#1; 2290491#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2290489#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2290488#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2288323#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2288313#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2288311#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2288309#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2288307#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 2288305#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 2288303#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 2288301#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 2288300#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2288299#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2288297#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2288295#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2288293#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 2288294#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2288292#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2288274#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2288272#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2288270#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2288267#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 2288265#L2057-3 assume !(1 == ~doorState~0); 2288262#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2288260#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 2288258#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 2288253#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 2288251#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 2288249#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2288248#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2288246#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2288244#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2288242#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2288239#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2288237#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 2288232#L1358-2 assume !(~currentFloorID~0 < 0); 2288230#L1373-2 assume !(~currentFloorID~0 < 0); 2288228#L1386-2 assume !(~currentFloorID~0 < 1); 2288225#L1402-2 assume !(~currentFloorID~0 < 1); 2288222#L1415-2 assume ~currentFloorID~0 < 2; 2288220#L1417-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2288218#L2797-36 assume !(0 == isFloorCalling_~floorID#1); 2288216#L2801-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2288211#L2824-36 stopRequestedInDirection__wrappee__empty_#t~ret51#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret51#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret51#1; 2288146#L1421-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2288144#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2288142#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2287433#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2287173#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2287079#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2287066#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 2287061#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2287041#L1769-7 assume { :end_inline_continueInDirection } true; 2287038#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2287036#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2287034#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2287027#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 2287025#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2287023#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2287021#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2287018#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2287012#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2287011#L207-2 assume !false; 2287010#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2287008#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2287006#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2287004#L215 assume 1 != cleanup_~tmp___0~0#1; 2287002#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2287001#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2286989#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2286981#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2286971#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2286967#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2286943#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2286937#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 2286923#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 2286921#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 2286919#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 2286917#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2286915#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2286913#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2286911#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2286908#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 2286895#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2286881#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2286874#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2286869#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2286867#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2286865#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 2286862#L2057-3 assume !(1 == ~doorState~0); 2286860#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2286859#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 2286858#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 2286857#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 2286856#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 2286855#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2286854#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2286853#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2286852#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2286851#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2286850#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2286849#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2286848#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2286847#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2286846#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2286845#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2286844#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2286843#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 2286842#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 2286841#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 2286840#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 2286839#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2286838#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2286837#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2286836#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2286835#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2286834#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2286724#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2286725#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2293362#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 2293360#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2293358#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2293356#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2293354#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2293352#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2293350#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 2293348#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2293346#L1769-9 assume { :end_inline_continueInDirection } true; 2293344#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2293342#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2293340#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2293338#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2293336#L2609-1 assume !(0 != ~floorButtons_spc2_1~0); 2293334#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2293332#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2293330#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2290511#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2290504#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2290500#L207-2 assume !false; 2258711#L208 [2021-12-07 00:29:40,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:40,808 INFO L85 PathProgramCache]: Analyzing trace with hash 507016629, now seen corresponding path program 1 times [2021-12-07 00:29:40,808 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:40,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501748293] [2021-12-07 00:29:40,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:40,809 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:40,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:40,822 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-07 00:29:40,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:40,860 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-07 00:29:40,861 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:40,861 INFO L85 PathProgramCache]: Analyzing trace with hash 193956734, now seen corresponding path program 1 times [2021-12-07 00:29:40,861 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:40,861 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106141175] [2021-12-07 00:29:40,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:40,861 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:40,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:40,892 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-07 00:29:40,892 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:40,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106141175] [2021-12-07 00:29:40,892 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106141175] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:40,892 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:40,892 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:40,892 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [907393084] [2021-12-07 00:29:40,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:40,893 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:40,893 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:40,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 00:29:40,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-07 00:29:40,893 INFO L87 Difference]: Start difference. First operand 86985 states and 153804 transitions. cyclomatic complexity: 66829 Second operand has 7 states, 7 states have (on average 17.142857142857142) internal successors, (120), 7 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:41,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:41,473 INFO L93 Difference]: Finished difference Result 152656 states and 275518 transitions. [2021-12-07 00:29:41,474 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-07 00:29:41,474 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 152656 states and 275518 transitions. [2021-12-07 00:29:42,087 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 87208 [2021-12-07 00:29:42,538 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 152656 states to 152656 states and 275518 transitions. [2021-12-07 00:29:42,538 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 96026 [2021-12-07 00:29:42,612 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 96026 [2021-12-07 00:29:42,613 INFO L73 IsDeterministic]: Start isDeterministic. Operand 152656 states and 275518 transitions. [2021-12-07 00:29:42,613 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:42,613 INFO L681 BuchiCegarLoop]: Abstraction has 152656 states and 275518 transitions. [2021-12-07 00:29:42,698 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152656 states and 275518 transitions. [2021-12-07 00:29:43,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152656 to 87204. [2021-12-07 00:29:43,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87204 states, 87204 states have (on average 1.7662377872574653) internal successors, (154023), 87203 states have internal predecessors, (154023), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:43,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87204 states to 87204 states and 154023 transitions. [2021-12-07 00:29:43,763 INFO L704 BuchiCegarLoop]: Abstraction has 87204 states and 154023 transitions. [2021-12-07 00:29:43,763 INFO L587 BuchiCegarLoop]: Abstraction has 87204 states and 154023 transitions. [2021-12-07 00:29:43,763 INFO L425 BuchiCegarLoop]: ======== Iteration 29============ [2021-12-07 00:29:43,763 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 87204 states and 154023 transitions. [2021-12-07 00:29:43,954 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 48868 [2021-12-07 00:29:43,954 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:43,954 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:43,958 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:43,959 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:43,959 INFO L791 eck$LassoCheckResult]: Stem: 2472940#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2472941#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2474544#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2474452#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 2473294#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2472916#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2472606#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 2472607#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 2473763#L467 assume !(0 == getOrigin_~person#1); 2473058#L471 assume !(1 == getOrigin_~person#1); 2473059#L475 assume !(2 == getOrigin_~person#1); 2472782#L479 assume !(3 == getOrigin_~person#1); 2472783#L483 assume !(4 == getOrigin_~person#1); 2472906#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 2473789#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2474177#L3068 assume !(0 == initPersonOnFloor_~floor#1); 2472891#L3095 assume 1 == initPersonOnFloor_~floor#1; 2472892#L3096 assume !(0 == initPersonOnFloor_~person#1); 2474508#L3099 assume !(1 == initPersonOnFloor_~person#1); 2472435#L3102 assume !(2 == initPersonOnFloor_~person#1); 2472436#L3105 assume !(3 == initPersonOnFloor_~person#1); 2474709#L3108 assume !(4 == initPersonOnFloor_~person#1); 2474765#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2474109#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2473023#L2860 assume !(0 == callOnFloor_~floorID#1); 2473024#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2474028#L2872-2 assume { :end_inline_callOnFloor } true; 2474632#L3212 assume { :end_inline_initPersonOnFloor } true; 2473367#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2473368#L2797 assume !(0 == isFloorCalling_~floorID#1); 2474036#L2801 assume !(1 == isFloorCalling_~floorID#1); 2472600#L2805 assume !(2 == isFloorCalling_~floorID#1); 2472475#L2809 assume !(3 == isFloorCalling_~floorID#1); 2472476#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2472870#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2472676#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2471805#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2471806#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2472973#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2473759#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2471473#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2471474#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 2471791#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2471792#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2474727#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2474878#L1966 assume !(0 != timeShift_~tmp___9~2#1); 2474636#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 2472989#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2471254#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 2471255#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 2473690#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 2473914#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 2473481#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2471665#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2471666#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2474869#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2471873#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2471874#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2474461#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 2474142#L1358 assume !(~currentFloorID~0 < 0); 2473394#L1373 assume !(~currentFloorID~0 < 0); 2472376#L1386 assume ~currentFloorID~0 < 1; 2472377#L1388 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2472434#L2797-5 assume !(0 == isFloorCalling_~floorID#1); 2471912#L2801-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2471739#L2824-5 stopRequestedInDirection__wrappee__empty_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret50#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret50#1; 2472339#L1392 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2472340#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2474963#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2474959#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2471826#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2471363#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2471364#L1757 assume !(0 != continueInDirection_~tmp~17#1); 2474946#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2474417#L1769-1 assume { :end_inline_continueInDirection } true; 2474418#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2505327#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2505325#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2505323#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2505321#L2609 assume !(0 != ~floorButtons_spc2_1~0); 2505319#L2622 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2505318#L2637 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2505316#L2652 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2505314#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2505313#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2505310#L207-2 assume !false; 2505311#L208 [2021-12-07 00:29:43,959 INFO L793 eck$LassoCheckResult]: Loop: 2505311#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2525727#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2524827#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2524824#L215 assume 1 != cleanup_~tmp___0~0#1; 2524818#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2524817#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2524806#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2524799#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2524790#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2524789#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2524788#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2524787#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 2524786#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 2524785#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 2524784#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 2524783#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2524782#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2524781#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2524780#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2524779#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2524775#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2524729#L1786-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2524728#L1161-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2524724#L1182-3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 2524504#L1793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2524502#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2524500#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2524498#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 2524495#L2057-3 assume !(1 == ~doorState~0); 2524493#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2524492#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 2524491#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 2524490#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 2524489#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 2524488#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2524487#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2524486#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2524485#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2524484#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2524483#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2524482#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 2524479#L1358-2 assume !(~currentFloorID~0 < 0); 2524476#L1373-2 assume !(~currentFloorID~0 < 0); 2524474#L1386-2 assume !(~currentFloorID~0 < 1); 2524469#L1402-2 assume !(~currentFloorID~0 < 1); 2524464#L1415-2 assume ~currentFloorID~0 < 2; 2524459#L1417-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2524455#L2797-36 assume !(0 == isFloorCalling_~floorID#1); 2524404#L2801-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2524399#L2824-36 stopRequestedInDirection__wrappee__empty_#t~ret51#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret51#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret51#1; 2524370#L1421-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2524368#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2524366#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2524363#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2524360#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2524357#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2524353#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 2524349#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2524346#L1769-7 assume { :end_inline_continueInDirection } true; 2524344#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2524343#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2524342#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2524341#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 2524340#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2524339#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2524338#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2524337#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2524336#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2524335#L207-2 assume !false; 2524334#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2524333#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 2524331#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2524329#L215 assume 1 != cleanup_~tmp___0~0#1; 2524326#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2524320#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2524309#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2524302#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 2524293#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2524292#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2524291#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2524290#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 2524289#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 2524288#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 2524287#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 2524286#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2524285#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2524282#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2524280#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2524259#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2524255#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2523596#L1786-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2523595#L1161-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2523591#L1182-3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 2523499#L1793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2523497#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2523495#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2523493#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 2523490#L2057-3 assume !(1 == ~doorState~0); 2523488#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2523487#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 2523486#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 2523485#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 2523484#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 2523483#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2523482#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2523481#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2523480#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2523479#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2523478#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2523477#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2523476#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2523475#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2523474#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2523473#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2523472#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2523471#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 2523470#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 2523469#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 2523468#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 2523467#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2523466#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2523465#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2523464#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2523463#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2523462#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2523337#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2523235#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2523236#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 2523227#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2523228#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2523214#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2523215#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2525794#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2525793#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 2525792#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2525791#L1769-9 assume { :end_inline_continueInDirection } true; 2525790#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2525789#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2525788#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2525787#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2525786#L2609-1 assume !(0 != ~floorButtons_spc2_1~0); 2525221#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2525785#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2525784#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2525218#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2525783#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2525782#L207-2 assume !false; 2505311#L208 [2021-12-07 00:29:43,959 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:43,959 INFO L85 PathProgramCache]: Analyzing trace with hash 507016629, now seen corresponding path program 2 times [2021-12-07 00:29:43,960 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:43,960 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [243819824] [2021-12-07 00:29:43,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:43,960 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:43,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:43,972 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-07 00:29:43,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:43,999 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-07 00:29:43,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:43,999 INFO L85 PathProgramCache]: Analyzing trace with hash 1963529086, now seen corresponding path program 1 times [2021-12-07 00:29:43,999 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:43,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [49896988] [2021-12-07 00:29:43,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:44,000 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:44,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:44,027 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2021-12-07 00:29:44,027 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:44,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [49896988] [2021-12-07 00:29:44,027 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [49896988] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:44,027 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:44,028 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:44,028 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084441479] [2021-12-07 00:29:44,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:44,028 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:44,028 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:44,028 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 00:29:44,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-07 00:29:44,029 INFO L87 Difference]: Start difference. First operand 87204 states and 154023 transitions. cyclomatic complexity: 66829 Second operand has 7 states, 7 states have (on average 16.857142857142858) internal successors, (118), 7 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:46,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:46,354 INFO L93 Difference]: Finished difference Result 421170 states and 766198 transitions. [2021-12-07 00:29:46,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-07 00:29:46,354 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 421170 states and 766198 transitions. [2021-12-07 00:29:48,081 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 251900 [2021-12-07 00:29:49,098 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 421170 states to 420802 states and 765830 transitions. [2021-12-07 00:29:49,098 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 264472 [2021-12-07 00:29:49,247 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 264472 [2021-12-07 00:29:49,247 INFO L73 IsDeterministic]: Start isDeterministic. Operand 420802 states and 765830 transitions. [2021-12-07 00:29:49,250 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:49,250 INFO L681 BuchiCegarLoop]: Abstraction has 420802 states and 765830 transitions. [2021-12-07 00:29:49,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 420802 states and 765830 transitions. [2021-12-07 00:29:51,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 420802 to 161148. [2021-12-07 00:29:51,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 161148 states, 161148 states have (on average 1.7642850050884902) internal successors, (284311), 161147 states have internal predecessors, (284311), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:51,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 161148 states to 161148 states and 284311 transitions. [2021-12-07 00:29:51,659 INFO L704 BuchiCegarLoop]: Abstraction has 161148 states and 284311 transitions. [2021-12-07 00:29:51,659 INFO L587 BuchiCegarLoop]: Abstraction has 161148 states and 284311 transitions. [2021-12-07 00:29:51,659 INFO L425 BuchiCegarLoop]: ======== Iteration 30============ [2021-12-07 00:29:51,659 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 161148 states and 284311 transitions. [2021-12-07 00:29:52,138 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 92940 [2021-12-07 00:29:52,138 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:52,138 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:52,143 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:52,143 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:52,143 INFO L791 eck$LassoCheckResult]: Stem: 2981368#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2981369#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2983024#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2982914#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 2981718#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2981341#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2981026#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 2981027#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 2982199#L467 assume !(0 == getOrigin_~person#1); 2981483#L471 assume !(1 == getOrigin_~person#1); 2981484#L475 assume !(2 == getOrigin_~person#1); 2981203#L479 assume !(3 == getOrigin_~person#1); 2981204#L483 assume !(4 == getOrigin_~person#1); 2981329#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 2982230#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2982637#L3068 assume !(0 == initPersonOnFloor_~floor#1); 2981316#L3095 assume 1 == initPersonOnFloor_~floor#1; 2981317#L3096 assume !(0 == initPersonOnFloor_~person#1); 2982980#L3099 assume !(1 == initPersonOnFloor_~person#1); 2980847#L3102 assume !(2 == initPersonOnFloor_~person#1); 2980848#L3105 assume !(3 == initPersonOnFloor_~person#1); 2983189#L3108 assume !(4 == initPersonOnFloor_~person#1); 2983247#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2982563#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2981448#L2860 assume !(0 == callOnFloor_~floorID#1); 2981449#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2982478#L2872-2 assume { :end_inline_callOnFloor } true; 2983109#L3212 assume { :end_inline_initPersonOnFloor } true; 2981794#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2981795#L2797 assume !(0 == isFloorCalling_~floorID#1); 2982490#L2801 assume !(1 == isFloorCalling_~floorID#1); 2981020#L2805 assume !(2 == isFloorCalling_~floorID#1); 2980886#L2809 assume !(3 == isFloorCalling_~floorID#1); 2980887#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2981295#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2981099#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2980209#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2980210#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2981400#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 2982196#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 2979885#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2979886#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 2980201#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 2980202#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2983204#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2983373#L1966 assume !(0 != timeShift_~tmp___9~2#1); 2983113#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 2981416#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2979665#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 2979666#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 2982124#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 2982366#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 2981905#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2980075#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2980076#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2983363#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2980278#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2980279#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 2982921#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 2982599#L1358 assume !(~currentFloorID~0 < 0); 2981819#L1373 assume !(~currentFloorID~0 < 0); 2980785#L1386 assume ~currentFloorID~0 < 1; 2980786#L1388 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2980842#L2797-5 assume !(0 == isFloorCalling_~floorID#1); 2980321#L2801-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2980149#L2824-5 stopRequestedInDirection__wrappee__empty_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret50#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret50#1; 2980749#L1392 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 2980750#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2983448#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2983445#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 2980231#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 2979774#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 2979775#L1757 assume !(0 != continueInDirection_~tmp~17#1); 2983439#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2983449#L1769-1 assume { :end_inline_continueInDirection } true; 2983482#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2982831#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 2981141#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2981142#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2981699#L2609 assume !(0 != ~floorButtons_spc2_1~0); 2980449#L2622 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2980450#L2637 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2979708#L2652 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2979709#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2982244#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2982245#L207-2 assume !false; 3018095#L208 [2021-12-07 00:29:52,144 INFO L793 eck$LassoCheckResult]: Loop: 3018095#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 3054918#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 3054917#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 3054916#L215 assume 1 != cleanup_~tmp___0~0#1; 3054915#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054914#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054913#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 3054911#L1252 assume !(0 != anyStopRequested_~tmp___3~0#1); 3054910#L1256 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3052729#L2797-26 assume !(0 == isFloorCalling_~floorID#1); 3054905#L2801-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054893#L2824-26 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 3054889#L1263 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 3054878#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 3054877#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 3054876#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054875#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 3054874#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 3054873#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 3054872#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 3054871#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054870#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3054869#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 3054868#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054867#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054861#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 3054860#L1786-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 3054859#L1161-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 3054855#L1182-3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 3054693#L1793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 3054689#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 3054685#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3054680#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 3054674#L2057-3 assume !(1 == ~doorState~0); 3054670#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054669#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 3054668#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 3054667#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 3054666#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 3054665#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054664#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3054663#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 3054662#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 3054661#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3054660#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 3054659#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 3054658#L1358-2 assume !(~currentFloorID~0 < 0); 3054657#L1373-2 assume !(~currentFloorID~0 < 0); 3054655#L1386-2 assume !(~currentFloorID~0 < 1); 3054653#L1402-2 assume !(~currentFloorID~0 < 1); 3054650#L1415-2 assume ~currentFloorID~0 < 2; 3054647#L1417-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054645#L2797-36 assume !(0 == isFloorCalling_~floorID#1); 3054639#L2801-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054630#L2824-36 stopRequestedInDirection__wrappee__empty_#t~ret51#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret51#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret51#1; 3054618#L1421-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 3054617#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3054616#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 3054614#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 3054613#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3054612#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 3054611#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 3054610#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3054609#L1769-7 assume { :end_inline_continueInDirection } true; 3054606#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 3054605#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 3054604#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 3054603#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 3054602#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 3054601#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 3054600#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 3054599#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 3054598#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 3054597#L207-2 assume !false; 3054596#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 3054595#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 3054594#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 3054593#L215 assume 1 != cleanup_~tmp___0~0#1; 3054592#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054591#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054590#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 3054588#L1252 assume !(0 != anyStopRequested_~tmp___3~0#1); 3054587#L1256 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3052324#L2797-26 assume !(0 == isFloorCalling_~floorID#1); 3054582#L2801-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054570#L2824-26 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 3054566#L1263 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 3054555#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 3054554#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 3054553#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054552#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 3054551#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 3054550#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 3054549#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 3054548#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054547#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3054546#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 3054545#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054544#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054538#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 3054537#L1786-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 3054536#L1161-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 3054532#L1182-3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 3054318#L1793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 3054316#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 3054314#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3054311#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 3054310#L2057-3 assume !(1 == ~doorState~0); 3054308#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054307#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 3054306#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 3054305#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 3054304#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 3054303#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054302#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3054301#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 3054300#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 3054299#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3054298#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 3054297#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 3054296#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3054295#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 3054294#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 3054292#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 3054291#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3054279#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 3054265#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 3054252#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 3054250#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 3054246#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3054241#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3054238#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 3054234#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 3054231#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3054228#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 3054172#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 3054164#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3054165#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 3054160#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 3054161#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 3054157#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 3054158#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3054931#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 3054930#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 3054929#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3054928#L1769-9 assume { :end_inline_continueInDirection } true; 3054927#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 3054926#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 3054925#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 3054924#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 3054923#L2609-1 assume !(0 != ~floorButtons_spc2_1~0); 3053661#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 3054922#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 3054921#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 3053658#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 3054920#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 3054919#L207-2 assume !false; 3018095#L208 [2021-12-07 00:29:52,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:52,144 INFO L85 PathProgramCache]: Analyzing trace with hash 507016629, now seen corresponding path program 3 times [2021-12-07 00:29:52,144 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:52,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1640901411] [2021-12-07 00:29:52,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:52,144 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:52,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:52,154 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-07 00:29:52,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:52,179 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-07 00:29:52,179 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:52,179 INFO L85 PathProgramCache]: Analyzing trace with hash -1684902718, now seen corresponding path program 1 times [2021-12-07 00:29:52,179 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:52,179 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2083293164] [2021-12-07 00:29:52,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:52,180 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:52,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:52,208 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-07 00:29:52,208 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:52,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2083293164] [2021-12-07 00:29:52,209 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2083293164] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:52,209 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:52,209 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-07 00:29:52,209 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1055136134] [2021-12-07 00:29:52,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:52,209 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:52,209 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:52,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-07 00:29:52,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-07 00:29:52,210 INFO L87 Difference]: Start difference. First operand 161148 states and 284311 transitions. cyclomatic complexity: 123173 Second operand has 4 states, 4 states have (on average 36.5) internal successors, (146), 4 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:53,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:29:53,296 INFO L93 Difference]: Finished difference Result 288308 states and 512639 transitions. [2021-12-07 00:29:53,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-07 00:29:53,297 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 288308 states and 512639 transitions. [2021-12-07 00:29:54,369 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 170172 [2021-12-07 00:29:55,056 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 288308 states to 288020 states and 512351 transitions. [2021-12-07 00:29:55,056 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 181324 [2021-12-07 00:29:55,135 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 181348 [2021-12-07 00:29:55,135 INFO L73 IsDeterministic]: Start isDeterministic. Operand 288020 states and 512351 transitions. [2021-12-07 00:29:55,137 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:29:55,137 INFO L681 BuchiCegarLoop]: Abstraction has 288020 states and 512351 transitions. [2021-12-07 00:29:55,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288020 states and 512351 transitions. [2021-12-07 00:29:57,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288020 to 238740. [2021-12-07 00:29:57,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238740 states, 238740 states have (on average 1.7778964563960795) internal successors, (424455), 238739 states have internal predecessors, (424455), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:29:57,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238740 states to 238740 states and 424455 transitions. [2021-12-07 00:29:57,938 INFO L704 BuchiCegarLoop]: Abstraction has 238740 states and 424455 transitions. [2021-12-07 00:29:57,938 INFO L587 BuchiCegarLoop]: Abstraction has 238740 states and 424455 transitions. [2021-12-07 00:29:57,939 INFO L425 BuchiCegarLoop]: ======== Iteration 31============ [2021-12-07 00:29:57,939 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 238740 states and 424455 transitions. [2021-12-07 00:29:58,378 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 146936 [2021-12-07 00:29:58,378 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:29:58,378 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:29:58,383 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:58,384 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:29:58,384 INFO L791 eck$LassoCheckResult]: Stem: 3430814#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3430815#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 3432429#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3432339#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 3431160#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 3430789#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 3430479#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 3430480#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 3431634#L467 assume !(0 == getOrigin_~person#1); 3430929#L471 assume !(1 == getOrigin_~person#1); 3430930#L475 assume !(2 == getOrigin_~person#1); 3430652#L479 assume !(3 == getOrigin_~person#1); 3430653#L483 assume !(4 == getOrigin_~person#1); 3430779#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 3431662#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3432068#L3068 assume !(0 == initPersonOnFloor_~floor#1); 3430764#L3095 assume 1 == initPersonOnFloor_~floor#1; 3430765#L3096 assume !(0 == initPersonOnFloor_~person#1); 3432395#L3099 assume !(1 == initPersonOnFloor_~person#1); 3430301#L3102 assume !(2 == initPersonOnFloor_~person#1); 3430302#L3105 assume !(3 == initPersonOnFloor_~person#1); 3432578#L3108 assume !(4 == initPersonOnFloor_~person#1); 3432624#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 3431997#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3430894#L2860 assume !(0 == callOnFloor_~floorID#1); 3430895#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 3431911#L2872-2 assume { :end_inline_callOnFloor } true; 3432509#L3212 assume { :end_inline_initPersonOnFloor } true; 3431238#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3431239#L2797 assume !(0 == isFloorCalling_~floorID#1); 3431923#L2801 assume !(1 == isFloorCalling_~floorID#1); 3430473#L2805 assume !(2 == isFloorCalling_~floorID#1); 3430345#L2809 assume !(3 == isFloorCalling_~floorID#1); 3430346#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3430743#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3430548#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 3429676#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3429677#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3430847#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 3431629#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 3429345#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 3429346#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 3429662#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 3429663#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 3432752#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3432753#L1966 assume !(0 != timeShift_~tmp___9~2#1); 3432513#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 3430861#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3429128#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 3429129#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 3431561#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 3431796#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 3431352#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3429537#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3429538#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 3432740#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 3429743#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3429744#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 3432348#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 3432030#L1358 assume !(~currentFloorID~0 < 0); 3431263#L1373 assume !(~currentFloorID~0 < 0); 3430243#L1386 assume ~currentFloorID~0 < 1; 3430244#L1388 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3430300#L2797-5 assume !(0 == isFloorCalling_~floorID#1); 3429784#L2801-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3429609#L2824-5 stopRequestedInDirection__wrappee__empty_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret50#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret50#1; 3430203#L1392 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 3430204#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3432832#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 3432831#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 3429696#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3429237#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 3429238#L1757 assume !(0 != continueInDirection_~tmp~17#1); 3432827#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3432833#L1769-1 assume { :end_inline_continueInDirection } true; 3433453#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 3432257#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 3430592#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 3430593#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 3429480#L2609 assume !(0 != ~floorButtons_spc2_1~0); 3429481#L2622 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 3429910#L2637 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 3429170#L2652 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 3429171#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 3431039#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 3431675#L207-2 assume !false; 3492550#L208 [2021-12-07 00:29:58,384 INFO L793 eck$LassoCheckResult]: Loop: 3492550#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 3578210#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 3578209#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 3578208#L215 assume 1 != cleanup_~tmp___0~0#1; 3578206#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3578207#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3578201#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 3578202#L1252 assume !(0 != anyStopRequested_~tmp___3~0#1); 3580129#L1256 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3577887#L2797-26 assume !(0 == isFloorCalling_~floorID#1); 3578189#L2801-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3578171#L2824-26 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 3578172#L1263 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 3578151#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 3578152#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 3578147#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3578148#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 3578143#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 3578144#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 3578139#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 3578140#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3578135#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3578136#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 3578131#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3578132#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 3578118#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3578111#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 3578106#L1786-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 3578107#L1161-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 3578123#L1182-3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 3578110#L1793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 3578109#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 3578098#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3578099#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 3580099#L2057-3 assume !(1 == ~doorState~0); 3580098#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3580093#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 3580094#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 3580089#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 3580090#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 3580085#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3580086#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3580081#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 3580082#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 3580077#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3580078#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 3580073#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 3580074#L1358-2 assume !(~currentFloorID~0 < 0); 3580069#L1373-2 assume !(~currentFloorID~0 < 0); 3580070#L1386-2 assume !(~currentFloorID~0 < 1); 3580063#L1402-2 assume !(~currentFloorID~0 < 1); 3580064#L1415-2 assume ~currentFloorID~0 < 2; 3580056#L1417-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3580057#L2797-36 assume !(0 == isFloorCalling_~floorID#1); 3580043#L2801-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3580027#L2824-36 stopRequestedInDirection__wrappee__empty_#t~ret51#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret51#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret51#1; 3580028#L1421-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 3580012#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3580013#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 3580007#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 3580009#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3580003#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 3580004#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 3579997#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3579998#L1769-7 assume { :end_inline_continueInDirection } true; 3579989#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 3579990#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 3579985#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 3579986#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 3579981#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 3579982#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 3579977#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 3579978#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 3579973#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 3579974#L207-2 assume !false; 3579969#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 3579970#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 3579965#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 3579966#L215 assume 1 != cleanup_~tmp___0~0#1; 3579961#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3579962#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3579957#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 3579958#L1252 assume !(0 != anyStopRequested_~tmp___3~0#1); 3580990#L1256 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3580416#L2797-26 assume !(0 == isFloorCalling_~floorID#1); 3580987#L2801-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3580975#L2824-26 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 3580971#L1263 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 3580960#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 3580959#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 3580958#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3580957#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 3580956#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 3580955#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 3580954#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 3580953#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3580952#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3580951#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 3580950#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3580949#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3580943#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 3580942#L1786-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 3580941#L1161-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 3580511#L1182-3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 3578403#L1793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 3578401#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 3578397#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3578393#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 3578388#L2057-3 assume !(1 == ~doorState~0); 3578383#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3578380#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 3578378#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 3578376#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 3578374#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 3578372#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3578370#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3578368#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 3578366#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 3578364#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3578362#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 3578360#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 3578358#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3578356#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 3578354#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 3578352#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 3578350#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3578348#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 3578346#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 3578344#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 3578342#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 3578340#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3578338#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3578336#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 3578334#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 3578332#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3578330#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 3578328#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 3578326#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3578324#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 3578322#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 3578320#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 3578318#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 3578316#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 3578314#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 3578290#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 3578274#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3578272#L1769-9 assume { :end_inline_continueInDirection } true; 3578248#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 3578230#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 3578228#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 3578226#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 3578224#L2609-1 assume !(0 != ~floorButtons_spc2_1~0); 3578222#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 3578219#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 3578217#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 3578213#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 3578212#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 3578211#L207-2 assume !false; 3492550#L208 [2021-12-07 00:29:58,385 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:58,385 INFO L85 PathProgramCache]: Analyzing trace with hash 507016629, now seen corresponding path program 4 times [2021-12-07 00:29:58,385 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:58,385 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947220417] [2021-12-07 00:29:58,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:58,385 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:58,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:58,396 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-07 00:29:58,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:29:58,420 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-07 00:29:58,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:29:58,421 INFO L85 PathProgramCache]: Analyzing trace with hash 23944185, now seen corresponding path program 1 times [2021-12-07 00:29:58,421 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:29:58,421 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [644635597] [2021-12-07 00:29:58,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:29:58,421 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:29:58,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:29:58,450 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2021-12-07 00:29:58,450 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:29:58,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [644635597] [2021-12-07 00:29:58,450 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [644635597] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:29:58,450 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:29:58,450 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:29:58,450 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [692588316] [2021-12-07 00:29:58,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:29:58,450 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:29:58,451 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:29:58,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 00:29:58,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-07 00:29:58,451 INFO L87 Difference]: Start difference. First operand 238740 states and 424455 transitions. cyclomatic complexity: 185725 Second operand has 7 states, 7 states have (on average 18.428571428571427) internal successors, (129), 7 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:30:05,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:30:05,788 INFO L93 Difference]: Finished difference Result 2100299 states and 3853355 transitions. [2021-12-07 00:30:05,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-12-07 00:30:05,789 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2100299 states and 3853355 transitions. [2021-12-07 00:30:13,889 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 1344270 [2021-12-07 00:30:19,885 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2100299 states to 2100299 states and 3853355 transitions. [2021-12-07 00:30:19,885 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1375156 [2021-12-07 00:30:20,836 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1375156 [2021-12-07 00:30:20,836 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2100299 states and 3853355 transitions. [2021-12-07 00:30:20,837 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-07 00:30:20,837 INFO L681 BuchiCegarLoop]: Abstraction has 2100299 states and 3853355 transitions. [2021-12-07 00:30:21,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2100299 states and 3853355 transitions. [2021-12-07 00:30:29,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2100299 to 477766. [2021-12-07 00:30:30,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 477766 states, 477766 states have (on average 1.7770247359586073) internal successors, (849002), 477765 states have internal predecessors, (849002), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:30:31,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 477766 states to 477766 states and 849002 transitions. [2021-12-07 00:30:31,597 INFO L704 BuchiCegarLoop]: Abstraction has 477766 states and 849002 transitions. [2021-12-07 00:30:31,597 INFO L587 BuchiCegarLoop]: Abstraction has 477766 states and 849002 transitions. [2021-12-07 00:30:31,597 INFO L425 BuchiCegarLoop]: ======== Iteration 32============ [2021-12-07 00:30:31,598 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 477766 states and 849002 transitions. [2021-12-07 00:30:32,791 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 294352 [2021-12-07 00:30:32,791 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-07 00:30:32,791 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-07 00:30:32,803 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:30:32,803 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:30:32,803 INFO L791 eck$LassoCheckResult]: Stem: 5769909#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5769910#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 5771541#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5771447#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 5770254#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 5769882#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 5769564#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 5769565#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 5770726#L467 assume !(0 == getOrigin_~person#1); 5770026#L471 assume !(1 == getOrigin_~person#1); 5770027#L475 assume !(2 == getOrigin_~person#1); 5769744#L479 assume !(3 == getOrigin_~person#1); 5769745#L483 assume !(4 == getOrigin_~person#1); 5769872#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 5770758#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5771158#L3068 assume !(0 == initPersonOnFloor_~floor#1); 5769856#L3095 assume 1 == initPersonOnFloor_~floor#1; 5769857#L3096 assume !(0 == initPersonOnFloor_~person#1); 5771506#L3099 assume !(1 == initPersonOnFloor_~person#1); 5769393#L3102 assume !(2 == initPersonOnFloor_~person#1); 5769394#L3105 assume !(3 == initPersonOnFloor_~person#1); 5771711#L3108 assume !(4 == initPersonOnFloor_~person#1); 5771760#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 5771089#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5769990#L2860 assume !(0 == callOnFloor_~floorID#1); 5769991#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 5771000#L2872-2 assume { :end_inline_callOnFloor } true; 5771633#L3212 assume { :end_inline_initPersonOnFloor } true; 5770329#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 5770330#L2797 assume !(0 == isFloorCalling_~floorID#1); 5771011#L2801 assume !(1 == isFloorCalling_~floorID#1); 5769558#L2805 assume !(2 == isFloorCalling_~floorID#1); 5769432#L2809 assume !(3 == isFloorCalling_~floorID#1); 5769433#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 5769835#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 5769637#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 5768762#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 5768763#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 5769943#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 5770722#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 5768432#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 5768433#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 5768748#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 5768749#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5771723#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 5771878#L1966 assume !(0 != timeShift_~tmp___9~2#1); 5771636#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 5769958#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 5768213#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 5768214#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 5770656#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 5770890#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 5770446#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 5768621#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 5768622#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 5771871#L1696 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 5768830#L1348 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 5768831#L3371 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 5771456#L1352 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 5771121#L1358 assume !(~currentFloorID~0 < 0); 5770359#L1373 assume !(~currentFloorID~0 < 0); 5769334#L1386 assume ~currentFloorID~0 < 1; 5769335#L1388 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 5769392#L2797-5 assume !(0 == isFloorCalling_~floorID#1); 5768870#L2801-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 5768696#L2824-5 stopRequestedInDirection__wrappee__empty_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret50#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret50#1; 5769296#L1392 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 5769297#L1670 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 5771951#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 5771950#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 5768782#L1753 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 5768323#L3371-1 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 5768324#L1757 assume !(0 != continueInDirection_~tmp~17#1); 5771945#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5771952#L1769-1 assume { :end_inline_continueInDirection } true; 5772581#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5772580#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 5769681#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 5769682#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 5770235#L2609 assume !(0 != ~floorButtons_spc2_1~0); 5768999#L2622 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 5769000#L2637 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 5768256#L2652 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 5768257#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5770771#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 5770772#L207-2 assume !false; 5838846#L208 [2021-12-07 00:30:32,803 INFO L793 eck$LassoCheckResult]: Loop: 5838846#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6008704#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 6008702#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6008700#L215 assume 1 != cleanup_~tmp___0~0#1; 6008674#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6008673#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6008672#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 6008670#L1252 assume !(0 != anyStopRequested_~tmp___3~0#1); 6008669#L1256 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 5952968#L2797-26 assume !(0 == isFloorCalling_~floorID#1); 6008665#L2801-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6008666#L2824-26 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 6008656#L1263 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 6008645#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 6008644#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6008643#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6008642#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 6008641#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 6008640#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 6008639#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 6008638#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6008637#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 6008636#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 6008635#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6008633#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 6008634#L2801-32 assume !(1 == isFloorCalling_~floorID#1); 6009536#L2805-32 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6009520#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 6009521#L1786-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 6009509#L1161-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 6009505#L1182-3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 6009479#L1793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 6009477#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 6009475#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 6009473#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 6009471#L2057-3 assume !(1 == ~doorState~0); 6009469#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6009468#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 6009467#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 6009466#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 6009465#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 6009464#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6009463#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 6009462#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 6009461#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6009460#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 6009459#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 6009457#L1352-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1); 6009458#L1358-2 assume !(~currentFloorID~0 < 0); 6016059#L1373-2 assume !(~currentFloorID~0 < 0); 6016058#L1386-2 assume !(~currentFloorID~0 < 1); 6016057#L1402-2 assume !(~currentFloorID~0 < 1); 6016056#L1415-2 assume ~currentFloorID~0 < 2; 6016055#L1417-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6016054#L2797-36 assume !(0 == isFloorCalling_~floorID#1); 6016047#L2801-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6015812#L2824-36 stopRequestedInDirection__wrappee__empty_#t~ret51#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret51#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret51#1; 6008375#L1421-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 6008372#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 6008370#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 6008367#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 6008365#L1753-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 6008364#L3371-6 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 6008362#L1757-9 assume 0 != continueInDirection_~tmp~17#1;~currentHeading~0 := 0; 6008360#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6008342#L1769-7 assume { :end_inline_continueInDirection } true; 6008314#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 6008310#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 6008308#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008307#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008306#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008302#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008300#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008299#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 6008295#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6008293#L207-2 assume !false; 6008157#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6008156#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 6008155#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6008154#L215 assume 1 != cleanup_~tmp___0~0#1; 6008111#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6008112#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6008107#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 6008108#L1252 assume !(0 != anyStopRequested_~tmp___3~0#1); 6009010#L1256 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 5952829#L2797-26 assume !(0 == isFloorCalling_~floorID#1); 6009006#L2801-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6009007#L2824-26 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 6008997#L1263 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 6008986#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 6008985#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6008984#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6008983#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 6008982#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 6008981#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 6008980#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 6008979#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6008978#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 6008977#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 6008976#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6008973#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6008970#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 6008927#L1786-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 6008926#L1161-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 6008922#L1182-3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 6008821#L1793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 6008819#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 6008815#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 6008811#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 6008807#L2057-3 assume !(1 == ~doorState~0); 6008803#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6008800#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 6008798#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 6008796#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 6008794#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 6008792#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6008790#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 6008788#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 6008786#L1696-2 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6008784#L1348-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 6008782#L3371-5 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 6008780#L1352-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 6008778#L1670-2 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 6008776#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 6008774#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 6008772#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 6008770#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 6008768#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 6008766#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 6008764#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 6008762#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 6008760#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 6008758#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 6008756#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 6008754#L1696-3 assume !(0 != stopRequestedInDirection_~tmp___0~4#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_#t~ret51#1, stopRequestedInDirection__wrappee__empty_#t~ret52#1, stopRequestedInDirection__wrappee__empty_#t~ret53#1, stopRequestedInDirection__wrappee__empty_#t~ret54#1, stopRequestedInDirection__wrappee__empty_#t~ret55#1, stopRequestedInDirection__wrappee__empty_#t~ret56#1, stopRequestedInDirection__wrappee__empty_#t~ret57#1, stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1, stopRequestedInDirection__wrappee__empty_~tmp~15#1, stopRequestedInDirection__wrappee__empty_~tmp___0~3#1, stopRequestedInDirection__wrappee__empty_~tmp___1~2#1, stopRequestedInDirection__wrappee__empty_~tmp___2~2#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~15#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6008752#L1348-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 6008750#L3371-7 stopRequestedInDirection__wrappee__empty_#t~ret48#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~15#1 := stopRequestedInDirection__wrappee__empty_#t~ret48#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret48#1; 6008748#L1352-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~15#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; 6008746#L1670-3 stopRequestedInDirection_#t~ret61#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 6008744#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 6008742#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 6008740#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 6008738#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 6008736#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 6008734#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 6008732#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 6008730#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6008728#L1769-9 assume { :end_inline_continueInDirection } true; 6008726#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 6008724#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 6008722#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008720#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 6008718#L2609-1 assume !(0 != ~floorButtons_spc2_1~0); 6008716#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008714#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008712#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 6008709#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 6008708#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6008707#L207-2 assume !false; 5838846#L208 [2021-12-07 00:30:32,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:30:32,804 INFO L85 PathProgramCache]: Analyzing trace with hash 507016629, now seen corresponding path program 5 times [2021-12-07 00:30:32,804 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:30:32,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1604092958] [2021-12-07 00:30:32,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:30:32,804 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:30:32,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:30:32,814 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-07 00:30:32,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-07 00:30:32,840 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-07 00:30:32,841 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:30:32,841 INFO L85 PathProgramCache]: Analyzing trace with hash -1927710425, now seen corresponding path program 1 times [2021-12-07 00:30:32,841 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:30:32,841 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [206593626] [2021-12-07 00:30:32,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:30:32,841 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:30:32,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:30:32,865 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2021-12-07 00:30:32,865 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:30:32,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [206593626] [2021-12-07 00:30:32,865 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [206593626] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:30:32,865 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:30:32,866 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 00:30:32,866 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1783827541] [2021-12-07 00:30:32,866 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:30:32,866 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-07 00:30:32,866 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:30:32,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 00:30:32,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 00:30:32,866 INFO L87 Difference]: Start difference. First operand 477766 states and 849002 transitions. cyclomatic complexity: 371246 Second operand has 5 states, 5 states have (on average 26.2) internal successors, (131), 5 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)