./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3a877d22 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 680b86ee69d2fa1a591b34672ee94362515e8041606baf59201de5a19c705dd0 --- Real Ultimate output --- This is Ultimate 0.2.2-3a877d227dc491413fd706022d0c47cd97beb353-3a877d2 [2021-12-15 17:12:58,376 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-15 17:12:58,378 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-15 17:12:58,428 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-15 17:12:58,428 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-15 17:12:58,430 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-15 17:12:58,432 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-15 17:12:58,436 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-15 17:12:58,437 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-15 17:12:58,440 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-15 17:12:58,441 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-15 17:12:58,442 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-15 17:12:58,442 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-15 17:12:58,444 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-15 17:12:58,446 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-15 17:12:58,448 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-15 17:12:58,449 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-15 17:12:58,450 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-15 17:12:58,451 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-15 17:12:58,455 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-15 17:12:58,456 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-15 17:12:58,457 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-15 17:12:58,459 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-15 17:12:58,460 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-15 17:12:58,465 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-15 17:12:58,465 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-15 17:12:58,465 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-15 17:12:58,466 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-15 17:12:58,467 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-15 17:12:58,467 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-15 17:12:58,468 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-15 17:12:58,468 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-15 17:12:58,469 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-15 17:12:58,470 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-15 17:12:58,471 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-15 17:12:58,472 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-15 17:12:58,472 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-15 17:12:58,472 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-15 17:12:58,473 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-15 17:12:58,473 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-15 17:12:58,474 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-15 17:12:58,475 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-15 17:12:58,507 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-15 17:12:58,508 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-15 17:12:58,508 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-15 17:12:58,508 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-15 17:12:58,510 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-15 17:12:58,510 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-15 17:12:58,510 INFO L138 SettingsManager]: * Use SBE=true [2021-12-15 17:12:58,510 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-15 17:12:58,510 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-15 17:12:58,511 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-15 17:12:58,511 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-15 17:12:58,512 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-15 17:12:58,512 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-15 17:12:58,512 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-15 17:12:58,512 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-15 17:12:58,512 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-15 17:12:58,513 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-15 17:12:58,513 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-15 17:12:58,513 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-15 17:12:58,513 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-15 17:12:58,513 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-15 17:12:58,514 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-15 17:12:58,514 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-15 17:12:58,514 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-15 17:12:58,514 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-15 17:12:58,514 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-15 17:12:58,515 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-15 17:12:58,515 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-15 17:12:58,515 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-15 17:12:58,515 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-15 17:12:58,515 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-15 17:12:58,516 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-15 17:12:58,517 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-15 17:12:58,517 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 680b86ee69d2fa1a591b34672ee94362515e8041606baf59201de5a19c705dd0 [2021-12-15 17:12:58,791 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-15 17:12:58,810 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-15 17:12:58,812 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-15 17:12:58,813 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-15 17:12:58,814 INFO L275 PluginConnector]: CDTParser initialized [2021-12-15 17:12:58,815 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c [2021-12-15 17:12:58,873 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b763eb89/326f5dcd94ad49c295dfa9f0e50dacf7/FLAGe956002b8 [2021-12-15 17:12:59,311 INFO L306 CDTParser]: Found 1 translation units. [2021-12-15 17:12:59,311 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c [2021-12-15 17:12:59,348 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b763eb89/326f5dcd94ad49c295dfa9f0e50dacf7/FLAGe956002b8 [2021-12-15 17:12:59,359 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b763eb89/326f5dcd94ad49c295dfa9f0e50dacf7 [2021-12-15 17:12:59,361 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-15 17:12:59,362 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-15 17:12:59,373 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-15 17:12:59,373 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-15 17:12:59,376 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-15 17:12:59,376 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:12:59,377 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@65715ba7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59, skipping insertion in model container [2021-12-15 17:12:59,377 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:12:59,381 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-15 17:12:59,437 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-15 17:12:59,618 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c[13407,13420] [2021-12-15 17:12:59,770 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-15 17:12:59,782 INFO L203 MainTranslator]: Completed pre-run [2021-12-15 17:12:59,821 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c[13407,13420] [2021-12-15 17:12:59,864 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-15 17:12:59,885 INFO L208 MainTranslator]: Completed translation [2021-12-15 17:12:59,886 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59 WrapperNode [2021-12-15 17:12:59,886 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-15 17:12:59,887 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-15 17:12:59,887 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-15 17:12:59,887 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-15 17:12:59,894 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:12:59,918 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,076 INFO L137 Inliner]: procedures = 91, calls = 335, calls flagged for inlining = 188, calls inlined = 294, statements flattened = 8982 [2021-12-15 17:13:00,076 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-15 17:13:00,092 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-15 17:13:00,092 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-15 17:13:00,092 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-15 17:13:00,099 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,100 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,116 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,117 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,176 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,218 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,232 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,253 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-15 17:13:00,254 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-15 17:13:00,254 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-15 17:13:00,255 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-15 17:13:00,255 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (1/1) ... [2021-12-15 17:13:00,260 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-15 17:13:00,279 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-15 17:13:00,321 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-15 17:13:00,332 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-15 17:13:00,353 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-15 17:13:00,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-15 17:13:00,354 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-15 17:13:00,354 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-15 17:13:00,514 INFO L236 CfgBuilder]: Building ICFG [2021-12-15 17:13:00,515 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-15 17:13:03,371 INFO L277 CfgBuilder]: Performing block encoding [2021-12-15 17:13:03,397 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-15 17:13:03,398 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-15 17:13:03,404 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.12 05:13:03 BoogieIcfgContainer [2021-12-15 17:13:03,405 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-15 17:13:03,405 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-15 17:13:03,405 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-15 17:13:03,408 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-15 17:13:03,409 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:13:03,409 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 15.12 05:12:59" (1/3) ... [2021-12-15 17:13:03,410 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6f4e2cc9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.12 05:13:03, skipping insertion in model container [2021-12-15 17:13:03,410 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:13:03,410 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:12:59" (2/3) ... [2021-12-15 17:13:03,410 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6f4e2cc9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.12 05:13:03, skipping insertion in model container [2021-12-15 17:13:03,410 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:13:03,410 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.12 05:13:03" (3/3) ... [2021-12-15 17:13:03,411 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product25.cil.c [2021-12-15 17:13:03,448 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-15 17:13:03,448 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-15 17:13:03,449 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-15 17:13:03,449 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-15 17:13:03,449 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-15 17:13:03,449 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-15 17:13:03,449 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-15 17:13:03,449 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-15 17:13:03,491 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2570 states, 2569 states have (on average 1.8649279875437914) internal successors, (4791), 2569 states have internal predecessors, (4791), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:03,569 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1237 [2021-12-15 17:13:03,569 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:03,569 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:03,581 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:03,581 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:03,581 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-15 17:13:03,586 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2570 states, 2569 states have (on average 1.8649279875437914) internal successors, (4791), 2569 states have internal predecessors, (4791), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:03,608 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1237 [2021-12-15 17:13:03,608 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:03,608 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:03,611 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:03,613 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:03,627 INFO L791 eck$LassoCheckResult]: Stem: 609#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2435#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1831#L74true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1558#L67true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1851#L82true main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 284#L903true assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1906#L875true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2410#L933true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 2076#L1829true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 520#L1854true bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2339#L1463true assume 0 == initPersonOnFloor_~floor#1; 2538#L1464true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 694#L1571-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2510#L940true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 53#L952-2true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1222#L1255true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1862#L1267-2true assume { :end_inline_callOnFloor } true; 1882#L1607true assume { :end_inline_initPersonOnFloor } true; 1861#L679true assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 400#L1829-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 416#L1854-1true angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 426#L1463-1true assume 0 == initPersonOnFloor_~floor#1; 101#L1464-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 78#L1571-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2276#L940-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1184#L952-5true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1429#L1255-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 91#L1267-5true assume { :end_inline_callOnFloor } true; 1701#L1607-1true assume { :end_inline_initPersonOnFloor } true; 264#L646true assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1499#L1188true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1965#L1215true stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1386#L2760true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 2036#L2772true timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 970#L2908true assume !(0 != timeShift_~tmp___9~2#1); 2192#L2999true assume !(1 == ~doorState~0); 979#L2999-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 663#L2351true assume !(1 == stopRequestedInDirection_~dir#1); 1916#L2520true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1821#L2673true timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1143#L3007true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1563#L2727true assume !(1 == ~currentHeading~0); 1804#L2737true assume !(0 == ~currentFloorID~0); 1871#L2737-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 139#L2743-1true assume { :end_inline_continueInDirection } true; 1407#L3016-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2365#L2147true __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 641#L978true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2017#L979true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2221#L2156true __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1076#L983true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1950#L1038true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 871#L3031true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1370#L707-2true [2021-12-15 17:13:03,629 INFO L793 eck$LassoCheckResult]: Loop: 1370#L707-2true assume !false; 1903#L708true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 207#L711true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1382#L1974true cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 942#L715true assume 1 != cleanup_~tmp___0~2#1; 1510#L715-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 116#L1188-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1519#L1215-21true anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1730#L2255true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 987#L2319true isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 74#L2332true cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 489#L727true assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2462#L1188-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2153#L1215-26true stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 241#L2760-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 758#L2772-1true timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 2343#L2908-2true assume !(0 != timeShift_~tmp___9~2#1); 411#L2999-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2002#L2999-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 157#L2351-2true assume !(1 == stopRequestedInDirection_~dir#1); 600#L2520-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1868#L2673-2true timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 330#L3007-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 2350#L2727-3true assume !(1 == ~currentHeading~0); 1588#L2737-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 936#L2737-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 554#L2743-7true assume { :end_inline_continueInDirection } true; 351#L3016-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 693#L2147-1true __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1919#L978-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 753#L979-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2063#L2156-5true __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1220#L983-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1548#L1038-1true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1485#L3031-1true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1370#L707-2true [2021-12-15 17:13:03,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:03,635 INFO L85 PathProgramCache]: Analyzing trace with hash 1914460111, now seen corresponding path program 1 times [2021-12-15 17:13:03,642 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:03,642 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [705758777] [2021-12-15 17:13:03,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:03,643 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:03,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:03,818 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:03,819 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:03,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [705758777] [2021-12-15 17:13:03,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [705758777] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:03,820 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:03,820 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:03,821 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1239323081] [2021-12-15 17:13:03,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:03,824 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:03,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:03,825 INFO L85 PathProgramCache]: Analyzing trace with hash -657119561, now seen corresponding path program 1 times [2021-12-15 17:13:03,825 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:03,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [396634240] [2021-12-15 17:13:03,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:03,826 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:03,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:03,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:03,891 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:03,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [396634240] [2021-12-15 17:13:03,892 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [396634240] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:03,892 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:03,892 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:13:03,892 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [579530323] [2021-12-15 17:13:03,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:03,907 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:03,908 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:03,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:13:03,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:13:03,959 INFO L87 Difference]: Start difference. First operand has 2570 states, 2569 states have (on average 1.8649279875437914) internal successors, (4791), 2569 states have internal predecessors, (4791), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:04,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:04,198 INFO L93 Difference]: Finished difference Result 4543 states and 8423 transitions. [2021-12-15 17:13:04,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:13:04,211 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4543 states and 8423 transitions. [2021-12-15 17:13:04,258 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2257 [2021-12-15 17:13:04,296 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4543 states to 4489 states and 8362 transitions. [2021-12-15 17:13:04,297 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4489 [2021-12-15 17:13:04,309 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4489 [2021-12-15 17:13:04,310 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4489 states and 8362 transitions. [2021-12-15 17:13:04,325 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:04,326 INFO L681 BuchiCegarLoop]: Abstraction has 4489 states and 8362 transitions. [2021-12-15 17:13:04,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4489 states and 8362 transitions. [2021-12-15 17:13:04,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4489 to 2551. [2021-12-15 17:13:04,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2551 states, 2551 states have (on average 1.86671893375147) internal successors, (4762), 2550 states have internal predecessors, (4762), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:04,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2551 states to 2551 states and 4762 transitions. [2021-12-15 17:13:04,444 INFO L704 BuchiCegarLoop]: Abstraction has 2551 states and 4762 transitions. [2021-12-15 17:13:04,445 INFO L587 BuchiCegarLoop]: Abstraction has 2551 states and 4762 transitions. [2021-12-15 17:13:04,445 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-15 17:13:04,445 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2551 states and 4762 transitions. [2021-12-15 17:13:04,456 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1239 [2021-12-15 17:13:04,457 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:04,457 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:04,461 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:04,462 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:04,462 INFO L791 eck$LassoCheckResult]: Stem: 8302#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 8303#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 9497#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 9338#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 9339#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 7749#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 7750#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 9524#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 9586#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 8159#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8160#L1463 assume 0 == initPersonOnFloor_~floor#1; 9657#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7528#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8428#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 7255#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7256#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7858#L1267-2 assume { :end_inline_callOnFloor } true; 9510#L1607 assume { :end_inline_initPersonOnFloor } true; 9509#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 7962#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 7963#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7985#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 7366#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7212#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7318#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 7843#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 9023#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7349#L1267-5 assume { :end_inline_callOnFloor } true; 7350#L1607-1 assume { :end_inline_initPersonOnFloor } true; 7712#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7713#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 8240#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 9199#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 7999#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 8000#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 9589#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 9590#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 9676#L2908 assume !(0 != timeShift_~tmp___9~2#1); 9622#L2999 assume !(1 == ~doorState~0); 8793#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 8374#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 8375#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 7179#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 8976#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 8978#L2727 assume !(1 == ~currentHeading~0); 9343#L2737 assume !(0 == ~currentFloorID~0); 9481#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7455#L2743-1 assume { :end_inline_continueInDirection } true; 7456#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 9220#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 8348#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 8349#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 9567#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 8900#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 7508#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8667#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 8668#L707-2 [2021-12-15 17:13:04,463 INFO L793 eck$LassoCheckResult]: Loop: 8668#L707-2 assume !false; 9188#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 7606#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 7607#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 8751#L715 assume 1 != cleanup_~tmp___0~2#1; 8752#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7401#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7402#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 9313#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 7901#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 7308#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 7309#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 8113#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 8066#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 7667#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 7668#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 7258#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 7562#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 7564#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 9677#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 7978#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 7979#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 7499#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 7500#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 7469#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 7839#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 7841#L2727-3 assume !(1 == ~currentHeading~0); 9364#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8745#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8218#L2743-7 assume { :end_inline_continueInDirection } true; 7875#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 7876#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 8427#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 8509#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 8510#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 9060#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 8083#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 9287#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 8668#L707-2 [2021-12-15 17:13:04,464 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:04,464 INFO L85 PathProgramCache]: Analyzing trace with hash -808199730, now seen corresponding path program 1 times [2021-12-15 17:13:04,464 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:04,465 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845099078] [2021-12-15 17:13:04,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:04,465 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:04,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:04,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:04,548 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:04,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845099078] [2021-12-15 17:13:04,548 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845099078] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:04,549 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:04,549 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:04,549 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [811157342] [2021-12-15 17:13:04,549 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:04,549 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:04,552 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:04,552 INFO L85 PathProgramCache]: Analyzing trace with hash -889864710, now seen corresponding path program 1 times [2021-12-15 17:13:04,553 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:04,553 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [976515816] [2021-12-15 17:13:04,553 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:04,553 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:04,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:04,600 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:04,601 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:04,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [976515816] [2021-12-15 17:13:04,601 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [976515816] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:04,601 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:04,602 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-15 17:13:04,602 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [640713965] [2021-12-15 17:13:04,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:04,602 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:04,602 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:04,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-15 17:13:04,603 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-15 17:13:04,603 INFO L87 Difference]: Start difference. First operand 2551 states and 4762 transitions. cyclomatic complexity: 2212 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:06,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:06,388 INFO L93 Difference]: Finished difference Result 23615 states and 43942 transitions. [2021-12-15 17:13:06,388 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-12-15 17:13:06,388 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23615 states and 43942 transitions. [2021-12-15 17:13:06,529 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15566 [2021-12-15 17:13:06,678 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23615 states to 23615 states and 43942 transitions. [2021-12-15 17:13:06,678 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23615 [2021-12-15 17:13:06,706 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23615 [2021-12-15 17:13:06,707 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23615 states and 43942 transitions. [2021-12-15 17:13:06,737 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:06,737 INFO L681 BuchiCegarLoop]: Abstraction has 23615 states and 43942 transitions. [2021-12-15 17:13:06,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23615 states and 43942 transitions. [2021-12-15 17:13:06,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23615 to 5048. [2021-12-15 17:13:06,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5048 states, 5048 states have (on average 1.8660855784469097) internal successors, (9420), 5047 states have internal predecessors, (9420), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:06,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5048 states to 5048 states and 9420 transitions. [2021-12-15 17:13:06,942 INFO L704 BuchiCegarLoop]: Abstraction has 5048 states and 9420 transitions. [2021-12-15 17:13:06,942 INFO L587 BuchiCegarLoop]: Abstraction has 5048 states and 9420 transitions. [2021-12-15 17:13:06,942 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-15 17:13:06,943 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5048 states and 9420 transitions. [2021-12-15 17:13:06,964 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2484 [2021-12-15 17:13:06,964 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:06,964 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:06,966 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:06,966 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:06,967 INFO L791 eck$LassoCheckResult]: Stem: 34542#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 34543#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 35825#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 35643#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 35644#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 33972#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 33973#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 35862#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 35936#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 34392#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 34393#L1463 assume 0 == initPersonOnFloor_~floor#1; 36034#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 33745#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 34679#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 33468#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 33469#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 35343#L1267-2 assume { :end_inline_callOnFloor } true; 35840#L1607 assume { :end_inline_initPersonOnFloor } true; 35839#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 34187#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 34188#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 34210#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 34227#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 33531#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 33532#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 35301#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 35302#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 34676#L1267-5 assume { :end_inline_callOnFloor } true; 35747#L1607-1 assume { :end_inline_initPersonOnFloor } true; 35748#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 35598#L1188 assume !(0 == isFloorCalling_~floorID#1); 35600#L1192 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 36281#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 36280#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 36278#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 36274#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 36273#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 36272#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 36270#L2908 assume !(0 != timeShift_~tmp___9~2#1); 36269#L2999 assume !(1 == ~doorState~0); 36268#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 36266#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 36251#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 36246#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 36244#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 35648#L2727 assume !(1 == ~currentHeading~0); 35649#L2737 assume !(0 == ~currentFloorID~0); 35845#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 35846#L2743-1 assume { :end_inline_continueInDirection } true; 36204#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 36203#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 36202#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 36200#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 36197#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 36188#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 36182#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 36181#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 36179#L707-2 [2021-12-15 17:13:06,968 INFO L793 eck$LassoCheckResult]: Loop: 36179#L707-2 assume !false; 36178#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 36177#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 36176#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 36175#L715 assume 1 != cleanup_~tmp___0~2#1; 36134#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 33617#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 33618#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 35615#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 35770#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 36136#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 36135#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 36060#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 36061#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 37387#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 37386#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 37384#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 37380#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 37379#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 37378#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 37376#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 37375#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 37374#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 37372#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 37363#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 37346#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 37345#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 36037#L2727-3 assume !(1 == ~currentHeading~0); 36038#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 35003#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 35004#L2743-7 assume { :end_inline_continueInDirection } true; 37307#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 37306#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 37305#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 37302#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 37300#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 37291#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 37285#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 36180#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 36179#L707-2 [2021-12-15 17:13:06,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:06,970 INFO L85 PathProgramCache]: Analyzing trace with hash 1510766569, now seen corresponding path program 1 times [2021-12-15 17:13:06,970 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:06,970 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2032352106] [2021-12-15 17:13:06,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:06,971 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:07,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:07,036 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:07,036 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:07,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2032352106] [2021-12-15 17:13:07,036 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2032352106] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:07,037 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:07,037 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:07,037 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1368725543] [2021-12-15 17:13:07,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:07,037 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:07,038 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:07,038 INFO L85 PathProgramCache]: Analyzing trace with hash -64448559, now seen corresponding path program 1 times [2021-12-15 17:13:07,038 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:07,038 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1247866724] [2021-12-15 17:13:07,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:07,039 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:07,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:07,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:07,063 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:07,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1247866724] [2021-12-15 17:13:07,064 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1247866724] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:07,064 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:07,064 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:13:07,064 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [976853014] [2021-12-15 17:13:07,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:07,065 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:07,065 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:07,066 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:13:07,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:13:07,066 INFO L87 Difference]: Start difference. First operand 5048 states and 9420 transitions. cyclomatic complexity: 4373 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:09,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:09,094 INFO L93 Difference]: Finished difference Result 17522 states and 32627 transitions. [2021-12-15 17:13:09,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-15 17:13:09,103 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17522 states and 32627 transitions. [2021-12-15 17:13:09,197 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9343 [2021-12-15 17:13:09,259 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17522 states to 17522 states and 32627 transitions. [2021-12-15 17:13:09,260 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17522 [2021-12-15 17:13:09,274 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17522 [2021-12-15 17:13:09,274 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17522 states and 32627 transitions. [2021-12-15 17:13:09,290 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:09,290 INFO L681 BuchiCegarLoop]: Abstraction has 17522 states and 32627 transitions. [2021-12-15 17:13:09,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17522 states and 32627 transitions. [2021-12-15 17:13:09,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17522 to 9014. [2021-12-15 17:13:09,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9014 states, 9014 states have (on average 1.8627690259596184) internal successors, (16791), 9013 states have internal predecessors, (16791), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:09,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9014 states to 9014 states and 16791 transitions. [2021-12-15 17:13:09,524 INFO L704 BuchiCegarLoop]: Abstraction has 9014 states and 16791 transitions. [2021-12-15 17:13:09,525 INFO L587 BuchiCegarLoop]: Abstraction has 9014 states and 16791 transitions. [2021-12-15 17:13:09,525 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-15 17:13:09,525 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9014 states and 16791 transitions. [2021-12-15 17:13:09,554 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4519 [2021-12-15 17:13:09,554 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:09,554 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:09,558 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:09,558 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:09,559 INFO L791 eck$LassoCheckResult]: Stem: 57122#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 57123#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 58400#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 58216#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 58217#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 56556#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 56557#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 58434#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 58509#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 56973#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 56974#L1463 assume 0 == initPersonOnFloor_~floor#1; 58603#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 56335#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 57253#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 56059#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 56060#L1255 assume !(0 == callOnFloor_~floorID#1); 57916#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 56665#L1267-2 assume { :end_inline_callOnFloor } true; 58416#L1607 assume { :end_inline_initPersonOnFloor } true; 58414#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 58415#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 58698#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 58696#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 56171#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 56016#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 58591#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 56650#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 58108#L1255-2 assume !(0 == callOnFloor_~floorID#1); 58109#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 56154#L1267-5 assume { :end_inline_callOnFloor } true; 56155#L1607-1 assume { :end_inline_initPersonOnFloor } true; 56519#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 56520#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 58659#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58715#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 58712#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 58713#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 60653#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 60654#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 60646#L2908 assume !(0 != timeShift_~tmp___9~2#1); 58557#L2999 assume !(1 == ~doorState~0); 57629#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 57197#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 57198#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 58386#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 57822#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 57824#L2727 assume !(1 == ~currentHeading~0); 58221#L2737 assume !(0 == ~currentFloorID~0); 58379#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58419#L2743-1 assume { :end_inline_continueInDirection } true; 58825#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58823#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 58821#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 58816#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 58809#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 58788#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 58781#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 58779#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 58778#L707-2 [2021-12-15 17:13:09,560 INFO L793 eck$LassoCheckResult]: Loop: 58778#L707-2 assume !false; 58777#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 58776#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 58775#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 58774#L715 assume 1 != cleanup_~tmp___0~2#1; 58772#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 58771#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 58754#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 58745#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 58734#L2259 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 58729#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 58728#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 58727#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 58726#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 58725#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58723#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 58720#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 58721#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 62459#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 62453#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 62451#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 56787#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 56788#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 56306#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 56307#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 56790#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 64808#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 58605#L2727-3 assume !(1 == ~currentHeading~0); 58606#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 57578#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 57579#L2743-7 assume { :end_inline_continueInDirection } true; 58826#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58824#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 58822#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 58819#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 58814#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 58799#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 58782#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 58780#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 58778#L707-2 [2021-12-15 17:13:09,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:09,561 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 1 times [2021-12-15 17:13:09,561 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:09,562 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1437075194] [2021-12-15 17:13:09,562 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:09,562 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:09,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:09,592 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:09,593 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:09,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1437075194] [2021-12-15 17:13:09,594 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1437075194] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:09,594 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:09,594 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:09,597 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [693087776] [2021-12-15 17:13:09,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:09,597 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:09,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:09,598 INFO L85 PathProgramCache]: Analyzing trace with hash -1863622482, now seen corresponding path program 1 times [2021-12-15 17:13:09,598 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:09,601 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699526767] [2021-12-15 17:13:09,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:09,602 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:09,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:09,641 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:09,642 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:09,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699526767] [2021-12-15 17:13:09,642 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699526767] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:09,642 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:09,642 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:13:09,642 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [502117154] [2021-12-15 17:13:09,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:09,643 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:09,643 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:09,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:13:09,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:13:09,644 INFO L87 Difference]: Start difference. First operand 9014 states and 16791 transitions. cyclomatic complexity: 7778 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:10,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:10,106 INFO L93 Difference]: Finished difference Result 35575 states and 66257 transitions. [2021-12-15 17:13:10,106 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-15 17:13:10,107 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 35575 states and 66257 transitions. [2021-12-15 17:13:10,268 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23858 [2021-12-15 17:13:10,521 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 35575 states to 35575 states and 66257 transitions. [2021-12-15 17:13:10,522 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 35575 [2021-12-15 17:13:10,556 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 35575 [2021-12-15 17:13:10,556 INFO L73 IsDeterministic]: Start isDeterministic. Operand 35575 states and 66257 transitions. [2021-12-15 17:13:10,586 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:10,587 INFO L681 BuchiCegarLoop]: Abstraction has 35575 states and 66257 transitions. [2021-12-15 17:13:10,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35575 states and 66257 transitions. [2021-12-15 17:13:10,848 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35575 to 16123. [2021-12-15 17:13:10,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16123 states, 16123 states have (on average 1.8627426657569932) internal successors, (30033), 16122 states have internal predecessors, (30033), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:10,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16123 states to 16123 states and 30033 transitions. [2021-12-15 17:13:10,916 INFO L704 BuchiCegarLoop]: Abstraction has 16123 states and 30033 transitions. [2021-12-15 17:13:10,916 INFO L587 BuchiCegarLoop]: Abstraction has 16123 states and 30033 transitions. [2021-12-15 17:13:10,916 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-15 17:13:10,917 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16123 states and 30033 transitions. [2021-12-15 17:13:10,966 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8912 [2021-12-15 17:13:10,966 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:10,966 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:10,969 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:10,970 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:10,970 INFO L791 eck$LassoCheckResult]: Stem: 101755#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 101756#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 103112#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 102903#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 102904#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 101173#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 101174#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 103157#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 103240#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 101600#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 101601#L1463 assume 0 == initPersonOnFloor_~floor#1; 103361#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 100945#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 101892#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 100668#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 100669#L1255 assume !(0 == callOnFloor_~floorID#1); 102592#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 101287#L1267-2 assume { :end_inline_callOnFloor } true; 103475#L1607 assume { :end_inline_initPersonOnFloor } true; 103474#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 103470#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 103467#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 103465#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 100782#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 100626#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 103338#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 101270#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 102789#L1255-2 assume !(0 == callOnFloor_~floorID#1); 102790#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 100765#L1267-5 assume { :end_inline_callOnFloor } true; 100766#L1607-1 assume { :end_inline_initPersonOnFloor } true; 101137#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 101138#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 103429#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 103427#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 103424#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 103425#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 104125#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 104124#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 104122#L2908 assume !(0 != timeShift_~tmp___9~2#1); 104121#L2999 assume !(1 == ~doorState~0); 104120#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 103925#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 103840#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 103827#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 103817#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 103809#L2727 assume !(1 == ~currentHeading~0); 103800#L2737 assume !(0 == ~currentFloorID~0); 103796#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 103792#L2743-1 assume { :end_inline_continueInDirection } true; 103791#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 103790#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 103789#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 103787#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 103784#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 103775#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 103769#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 103768#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 103766#L707-2 [2021-12-15 17:13:10,970 INFO L793 eck$LassoCheckResult]: Loop: 103766#L707-2 assume !false; 103765#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 103764#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 103763#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 103762#L715 assume 1 != cleanup_~tmp___0~2#1; 103761#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 103759#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 103755#L1192-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 103735#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 103727#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 103711#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 103709#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 103572#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 103569#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 103565#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 103564#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 103562#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 103558#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 103556#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 103555#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 103553#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 103552#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 103551#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 103549#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 103531#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 103532#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 107118#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 107119#L2727-3 assume !(1 == ~currentHeading~0); 107305#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 102939#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 101660#L2743-7 assume { :end_inline_continueInDirection } true; 101305#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 101306#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 101886#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 101979#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 101980#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 103233#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 107064#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 103767#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 103766#L707-2 [2021-12-15 17:13:10,971 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:10,971 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 2 times [2021-12-15 17:13:10,971 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:10,971 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1161853685] [2021-12-15 17:13:10,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:10,972 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:10,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:11,082 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:11,083 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:11,083 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1161853685] [2021-12-15 17:13:11,083 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1161853685] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:11,083 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:11,083 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:11,083 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1514808454] [2021-12-15 17:13:11,084 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:11,084 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:11,085 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:11,085 INFO L85 PathProgramCache]: Analyzing trace with hash 85645251, now seen corresponding path program 1 times [2021-12-15 17:13:11,085 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:11,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2082580242] [2021-12-15 17:13:11,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:11,086 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:11,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:11,109 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:11,110 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:11,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2082580242] [2021-12-15 17:13:11,110 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2082580242] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:11,110 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:11,110 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:11,111 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210765575] [2021-12-15 17:13:11,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:11,111 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:11,111 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:11,112 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:13:11,112 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:13:11,112 INFO L87 Difference]: Start difference. First operand 16123 states and 30033 transitions. cyclomatic complexity: 13911 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:11,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:11,556 INFO L93 Difference]: Finished difference Result 17770 states and 32776 transitions. [2021-12-15 17:13:11,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:13:11,557 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17770 states and 32776 transitions. [2021-12-15 17:13:11,632 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9878 [2021-12-15 17:13:11,689 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17770 states to 17770 states and 32776 transitions. [2021-12-15 17:13:11,689 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17770 [2021-12-15 17:13:11,705 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17770 [2021-12-15 17:13:11,706 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17770 states and 32776 transitions. [2021-12-15 17:13:11,721 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:11,722 INFO L681 BuchiCegarLoop]: Abstraction has 17770 states and 32776 transitions. [2021-12-15 17:13:11,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17770 states and 32776 transitions. [2021-12-15 17:13:12,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17770 to 16123. [2021-12-15 17:13:12,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16123 states, 16123 states have (on average 1.853811325435713) internal successors, (29889), 16122 states have internal predecessors, (29889), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:12,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16123 states to 16123 states and 29889 transitions. [2021-12-15 17:13:12,068 INFO L704 BuchiCegarLoop]: Abstraction has 16123 states and 29889 transitions. [2021-12-15 17:13:12,068 INFO L587 BuchiCegarLoop]: Abstraction has 16123 states and 29889 transitions. [2021-12-15 17:13:12,068 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-15 17:13:12,068 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16123 states and 29889 transitions. [2021-12-15 17:13:12,118 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8912 [2021-12-15 17:13:12,118 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:12,118 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:12,124 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:12,124 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:12,125 INFO L791 eck$LassoCheckResult]: Stem: 135626#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 135627#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 136917#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 136728#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 136729#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 135064#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 135065#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 136948#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 137032#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 135480#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 135481#L1463 assume 0 == initPersonOnFloor_~floor#1; 137129#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 134840#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 135758#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 134568#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 134569#L1255 assume !(0 == callOnFloor_~floorID#1); 136424#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 135173#L1267-2 assume { :end_inline_callOnFloor } true; 137223#L1607 assume { :end_inline_initPersonOnFloor } true; 137222#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 137218#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 137215#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 137213#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 134679#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 134526#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 137109#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 135157#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 136619#L1255-2 assume !(0 == callOnFloor_~floorID#1); 136620#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 134662#L1267-5 assume { :end_inline_callOnFloor } true; 134663#L1607-1 assume { :end_inline_initPersonOnFloor } true; 135026#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 135027#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 137179#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 137177#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 137174#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 137175#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 139323#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 139317#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 139315#L2908 assume !(0 != timeShift_~tmp___9~2#1); 137078#L2999 assume !(1 == ~doorState~0); 136140#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 135699#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 135700#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 135690#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 149542#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 149543#L2727 assume !(1 == ~currentHeading~0); 149895#L2737 assume !(0 == ~currentFloorID~0); 149893#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 149367#L2743-1 assume { :end_inline_continueInDirection } true; 149366#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 149365#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 149362#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 149363#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 137087#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 137088#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 137309#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 137285#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 137282#L707-2 [2021-12-15 17:13:12,125 INFO L793 eck$LassoCheckResult]: Loop: 137282#L707-2 assume !false; 137279#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 137277#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 137275#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 137273#L715 assume 1 != cleanup_~tmp___0~2#1; 137269#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 137265#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 137262#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 137263#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 137247#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 137248#L1188-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 150287#L1215-22 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 135215#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 135216#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 136149#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 142659#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 142657#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 142652#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 142647#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 142648#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 142651#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 142649#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 142650#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 142639#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 135295#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 135296#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 137000#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 150504#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 150500#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 150299#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 150298#L2727-3 assume !(1 == ~currentHeading~0); 150297#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 136090#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 135541#L2743-7 assume { :end_inline_continueInDirection } true; 135190#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 135191#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 135752#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 135839#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 135840#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 136420#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 135399#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 137286#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 137282#L707-2 [2021-12-15 17:13:12,126 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:12,126 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 3 times [2021-12-15 17:13:12,126 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:12,126 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000304342] [2021-12-15 17:13:12,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:12,126 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:12,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:12,155 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:12,155 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:12,155 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000304342] [2021-12-15 17:13:12,155 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2000304342] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:12,155 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:12,156 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:12,156 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1981772916] [2021-12-15 17:13:12,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:12,156 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:12,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:12,157 INFO L85 PathProgramCache]: Analyzing trace with hash 1331043666, now seen corresponding path program 1 times [2021-12-15 17:13:12,157 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:12,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [548425858] [2021-12-15 17:13:12,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:12,157 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:12,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:12,170 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:12,170 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:12,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [548425858] [2021-12-15 17:13:12,171 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [548425858] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:12,171 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:12,171 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:12,171 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424838372] [2021-12-15 17:13:12,171 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:12,171 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:12,172 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:12,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:13:12,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:13:12,173 INFO L87 Difference]: Start difference. First operand 16123 states and 29889 transitions. cyclomatic complexity: 13767 Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:12,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:12,771 INFO L93 Difference]: Finished difference Result 24313 states and 44912 transitions. [2021-12-15 17:13:12,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:13:12,771 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24313 states and 44912 transitions. [2021-12-15 17:13:12,898 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13448 [2021-12-15 17:13:12,992 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24313 states to 24313 states and 44912 transitions. [2021-12-15 17:13:12,992 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24313 [2021-12-15 17:13:13,018 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24313 [2021-12-15 17:13:13,018 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24313 states and 44912 transitions. [2021-12-15 17:13:13,043 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:13,043 INFO L681 BuchiCegarLoop]: Abstraction has 24313 states and 44912 transitions. [2021-12-15 17:13:13,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24313 states and 44912 transitions. [2021-12-15 17:13:13,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24313 to 16009. [2021-12-15 17:13:13,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16009 states, 16009 states have (on average 1.8480229870697733) internal successors, (29585), 16008 states have internal predecessors, (29585), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:13,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16009 states to 16009 states and 29585 transitions. [2021-12-15 17:13:13,510 INFO L704 BuchiCegarLoop]: Abstraction has 16009 states and 29585 transitions. [2021-12-15 17:13:13,510 INFO L587 BuchiCegarLoop]: Abstraction has 16009 states and 29585 transitions. [2021-12-15 17:13:13,510 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-15 17:13:13,510 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16009 states and 29585 transitions. [2021-12-15 17:13:13,602 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8840 [2021-12-15 17:13:13,602 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:13,602 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:13,606 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:13,606 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:13,606 INFO L791 eck$LassoCheckResult]: Stem: 176074#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 176075#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 177350#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 177169#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 177170#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 175506#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 175507#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 177385#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 177460#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 175927#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 175928#L1463 assume 0 == initPersonOnFloor_~floor#1; 177561#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 175282#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 176209#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 175011#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 175012#L1255 assume !(0 == callOnFloor_~floorID#1); 176870#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 175619#L1267-2 assume { :end_inline_callOnFloor } true; 177665#L1607 assume { :end_inline_initPersonOnFloor } true; 177664#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 177660#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 177657#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 177655#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 175123#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 174969#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 177543#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 175600#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 177061#L1255-2 assume !(0 == callOnFloor_~floorID#1); 177062#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 175107#L1267-5 assume { :end_inline_callOnFloor } true; 175108#L1607-1 assume { :end_inline_initPersonOnFloor } true; 175467#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 175468#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 177620#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 177618#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 177615#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 177616#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 179936#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 179937#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 179927#L2908 assume !(0 != timeShift_~tmp___9~2#1); 179928#L2999 assume !(1 == ~doorState~0); 181320#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 181317#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 181307#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 181279#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 181221#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 181222#L2727 assume !(1 == ~currentHeading~0); 181484#L2737 assume !(0 == ~currentFloorID~0); 181482#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 178193#L2743-1 assume { :end_inline_continueInDirection } true; 178188#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 178186#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 177753#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 177754#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 177755#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 177702#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 177694#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 177691#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 177688#L707-2 [2021-12-15 17:13:13,607 INFO L793 eck$LassoCheckResult]: Loop: 177688#L707-2 assume !false; 177685#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 177681#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 177679#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 177677#L715 assume 1 != cleanup_~tmp___0~2#1; 177674#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 177675#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 178134#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 178131#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 178129#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 178127#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 178125#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 178122#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 178014#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 177922#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 177859#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 177857#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 177856#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 177855#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 177853#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 177848#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 177844#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 177841#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 177838#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 177836#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 177834#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 177831#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 177821#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 177807#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 177797#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 177789#L2727-3 assume !(1 == ~currentHeading~0); 177780#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 177776#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 177771#L2743-7 assume { :end_inline_continueInDirection } true; 177772#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 181513#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 181511#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 181512#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 177749#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 177750#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 177695#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 177692#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 177688#L707-2 [2021-12-15 17:13:13,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:13,607 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 4 times [2021-12-15 17:13:13,607 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:13,608 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [522260232] [2021-12-15 17:13:13,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:13,608 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:13,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:13,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:13,629 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:13,629 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [522260232] [2021-12-15 17:13:13,629 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [522260232] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:13,629 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:13,629 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:13,629 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868344622] [2021-12-15 17:13:13,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:13,630 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:13,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:13,630 INFO L85 PathProgramCache]: Analyzing trace with hash -544025938, now seen corresponding path program 1 times [2021-12-15 17:13:13,630 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:13,630 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1042229085] [2021-12-15 17:13:13,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:13,631 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:13,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:13,646 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:13,647 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:13,647 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1042229085] [2021-12-15 17:13:13,647 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1042229085] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:13,647 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:13,647 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:13:13,647 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1482925538] [2021-12-15 17:13:13,647 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:13,648 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:13,648 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:13,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:13:13,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:13:13,648 INFO L87 Difference]: Start difference. First operand 16009 states and 29585 transitions. cyclomatic complexity: 13577 Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:13,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:13,926 INFO L93 Difference]: Finished difference Result 24409 states and 44866 transitions. [2021-12-15 17:13:13,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:13:13,927 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24409 states and 44866 transitions. [2021-12-15 17:13:14,057 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16964 [2021-12-15 17:13:14,134 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24409 states to 24409 states and 44866 transitions. [2021-12-15 17:13:14,134 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24409 [2021-12-15 17:13:14,156 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24409 [2021-12-15 17:13:14,156 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24409 states and 44866 transitions. [2021-12-15 17:13:14,173 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:14,174 INFO L681 BuchiCegarLoop]: Abstraction has 24409 states and 44866 transitions. [2021-12-15 17:13:14,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24409 states and 44866 transitions. [2021-12-15 17:13:14,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24409 to 16027. [2021-12-15 17:13:14,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16027 states, 16027 states have (on average 1.8470705684157984) internal successors, (29603), 16026 states have internal predecessors, (29603), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:14,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16027 states to 16027 states and 29603 transitions. [2021-12-15 17:13:14,405 INFO L704 BuchiCegarLoop]: Abstraction has 16027 states and 29603 transitions. [2021-12-15 17:13:14,405 INFO L587 BuchiCegarLoop]: Abstraction has 16027 states and 29603 transitions. [2021-12-15 17:13:14,405 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-15 17:13:14,405 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16027 states and 29603 transitions. [2021-12-15 17:13:14,493 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8852 [2021-12-15 17:13:14,493 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:14,493 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:14,495 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:14,496 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:14,496 INFO L791 eck$LassoCheckResult]: Stem: 216511#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 216512#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 217897#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 217681#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 217682#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 215936#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 215937#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 217939#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 218032#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 216359#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 216360#L1463 assume 0 == initPersonOnFloor_~floor#1; 218159#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 215714#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 216649#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 215440#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 215441#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 217344#L1267-2 assume { :end_inline_callOnFloor } true; 217911#L1607 assume { :end_inline_initPersonOnFloor } true; 217910#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 216156#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 216157#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 216182#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 216196#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 215502#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 215503#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 217299#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 217300#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 216644#L1267-5 assume { :end_inline_callOnFloor } true; 217798#L1607-1 assume { :end_inline_initPersonOnFloor } true; 217799#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 217628#L1188 assume !(0 == isFloorCalling_~floorID#1); 217630#L1192 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 218755#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 218754#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 218753#L2164 assume !(0 == buttonForFloorIsPressed_~floorID#1); 218752#L2168 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 218748#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 218746#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 218745#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 218743#L2908 assume !(0 != timeShift_~tmp___9~2#1); 218742#L2999 assume !(1 == ~doorState~0); 218741#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216589#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 216590#L2520 assume !(0 == ~currentFloorID~0); 217949#L2526 assume !(~currentFloorID~0 > 0); 218072#L2541 assume ~currentFloorID~0 > 0; 218073#L2543 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 217390#L2544 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 217392#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 221608#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 217686#L2727 assume !(1 == ~currentHeading~0); 217687#L2737 assume !(0 == ~currentFloorID~0); 217917#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 217918#L2743-1 assume { :end_inline_continueInDirection } true; 217529#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 217530#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 216561#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 216562#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 218005#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 217158#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 215694#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 216906#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 216907#L707-2 [2021-12-15 17:13:14,496 INFO L793 eck$LassoCheckResult]: Loop: 216907#L707-2 assume !false; 217493#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 215796#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 215797#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 216996#L715 assume 1 != cleanup_~tmp___0~2#1; 216997#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 215585#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 215586#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 217644#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 218167#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 231125#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 216308#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 216309#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 224061#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 224057#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 224056#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 224055#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 224054#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 224050#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 224048#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 224047#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 221714#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 216172#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 216173#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 218337#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 218338#L2520-2 assume !(0 == ~currentFloorID~0); 217614#L2526-2 assume !(~currentFloorID~0 > 0); 217289#L2541-2 assume ~currentFloorID~0 > 0; 218331#L2543-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 218094#L2544-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 217290#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 221490#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 218164#L2727-3 assume !(1 == ~currentHeading~0); 218165#L2737-9 assume !(0 == ~currentFloorID~0); 216989#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 216990#L2743-7 assume { :end_inline_continueInDirection } true; 231263#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 231262#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 231261#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 231260#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 231259#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 231253#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 217670#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 217611#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 216907#L707-2 [2021-12-15 17:13:14,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:14,497 INFO L85 PathProgramCache]: Analyzing trace with hash 1266470023, now seen corresponding path program 1 times [2021-12-15 17:13:14,497 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:14,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [171632450] [2021-12-15 17:13:14,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:14,498 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:14,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:14,517 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:14,518 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:14,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [171632450] [2021-12-15 17:13:14,518 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [171632450] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:14,519 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:14,519 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:14,519 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819314997] [2021-12-15 17:13:14,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:14,519 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:14,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:14,520 INFO L85 PathProgramCache]: Analyzing trace with hash 1859070901, now seen corresponding path program 1 times [2021-12-15 17:13:14,522 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:14,525 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [508576686] [2021-12-15 17:13:14,525 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:14,525 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:14,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:14,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:14,570 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:14,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [508576686] [2021-12-15 17:13:14,573 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [508576686] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:14,573 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:14,573 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:13:14,573 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995414272] [2021-12-15 17:13:14,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:14,575 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:14,576 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:14,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:13:14,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:13:14,576 INFO L87 Difference]: Start difference. First operand 16027 states and 29603 transitions. cyclomatic complexity: 13577 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:15,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:15,508 INFO L93 Difference]: Finished difference Result 25247 states and 46332 transitions. [2021-12-15 17:13:15,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-15 17:13:15,509 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25247 states and 46332 transitions. [2021-12-15 17:13:15,629 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14002 [2021-12-15 17:13:15,711 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25247 states to 25247 states and 46332 transitions. [2021-12-15 17:13:15,711 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25247 [2021-12-15 17:13:15,734 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25247 [2021-12-15 17:13:15,734 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25247 states and 46332 transitions. [2021-12-15 17:13:15,752 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:15,752 INFO L681 BuchiCegarLoop]: Abstraction has 25247 states and 46332 transitions. [2021-12-15 17:13:15,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25247 states and 46332 transitions. [2021-12-15 17:13:16,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25247 to 23775. [2021-12-15 17:13:16,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23775 states, 23775 states have (on average 1.8377707676130388) internal successors, (43693), 23774 states have internal predecessors, (43693), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:16,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23775 states to 23775 states and 43693 transitions. [2021-12-15 17:13:16,153 INFO L704 BuchiCegarLoop]: Abstraction has 23775 states and 43693 transitions. [2021-12-15 17:13:16,153 INFO L587 BuchiCegarLoop]: Abstraction has 23775 states and 43693 transitions. [2021-12-15 17:13:16,153 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-15 17:13:16,153 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23775 states and 43693 transitions. [2021-12-15 17:13:16,226 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13176 [2021-12-15 17:13:16,226 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:16,226 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:16,230 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:16,230 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:16,230 INFO L791 eck$LassoCheckResult]: Stem: 257781#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 257782#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 259076#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 258882#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 258883#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 257215#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 257216#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 259116#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 259201#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 257637#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 257638#L1463 assume 0 == initPersonOnFloor_~floor#1; 259305#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 256993#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 257916#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 256721#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 256722#L1255 assume !(0 == callOnFloor_~floorID#1); 258575#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 257326#L1267-2 assume { :end_inline_callOnFloor } true; 259426#L1607 assume { :end_inline_initPersonOnFloor } true; 259425#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 259421#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 259418#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 259416#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 256833#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 256680#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 259285#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 257309#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 258773#L1255-2 assume !(0 == callOnFloor_~floorID#1); 258774#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 256816#L1267-5 assume { :end_inline_callOnFloor } true; 256817#L1607-1 assume { :end_inline_initPersonOnFloor } true; 257178#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 257179#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 259380#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 259378#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 259374#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 259375#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 264900#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 264899#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 264869#L2908 assume !(0 != timeShift_~tmp___9~2#1); 264870#L2999 assume !(1 == ~doorState~0); 266348#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 266346#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 266347#L2520 assume !(0 == ~currentFloorID~0); 259453#L2526 assume !(~currentFloorID~0 > 0); 259454#L2541 assume ~currentFloorID~0 > 0; 266442#L2543 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 266441#L2544 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 259311#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 266456#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 266359#L2727 assume !(1 == ~currentHeading~0); 266290#L2737 assume !(0 == ~currentFloorID~0); 266132#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 266128#L2743-1 assume { :end_inline_continueInDirection } true; 266126#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 266125#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 266124#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 266112#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 266110#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 266080#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 266071#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 266067#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 266064#L707-2 [2021-12-15 17:13:16,231 INFO L793 eck$LassoCheckResult]: Loop: 266064#L707-2 assume !false; 266063#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 266062#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 266061#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 266060#L715 assume 1 != cleanup_~tmp___0~2#1; 261891#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 261889#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 261890#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 261892#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 261876#L2259 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 259530#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 261875#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 261874#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 261872#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 261871#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 261737#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 261738#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 261749#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 261752#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 261739#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 261728#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 261725#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 261726#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 266521#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 266519#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 266520#L2520-2 assume !(0 == ~currentFloorID~0); 266833#L2526-2 assume !(~currentFloorID~0 > 0); 257943#L2541-2 assume ~currentFloorID~0 > 0; 257945#L2543-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 259118#L2544-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 256936#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 259098#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 266460#L2727-3 assume !(1 == ~currentHeading~0); 266459#L2737-9 assume !(0 == ~currentFloorID~0); 266154#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 266150#L2743-7 assume { :end_inline_continueInDirection } true; 266148#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 266147#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 266141#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 266142#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 266143#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 266091#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 266072#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 266068#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 266064#L707-2 [2021-12-15 17:13:16,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:16,231 INFO L85 PathProgramCache]: Analyzing trace with hash -1473127167, now seen corresponding path program 1 times [2021-12-15 17:13:16,232 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:16,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2091828307] [2021-12-15 17:13:16,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:16,232 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:16,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:16,252 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:16,252 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:16,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2091828307] [2021-12-15 17:13:16,253 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2091828307] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:16,253 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:16,253 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:16,253 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [811515384] [2021-12-15 17:13:16,253 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:16,253 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:16,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:16,254 INFO L85 PathProgramCache]: Analyzing trace with hash 1168663800, now seen corresponding path program 1 times [2021-12-15 17:13:16,254 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:16,254 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1301893812] [2021-12-15 17:13:16,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:16,254 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:16,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:16,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:16,273 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:16,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1301893812] [2021-12-15 17:13:16,273 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1301893812] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:16,273 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:16,273 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:13:16,274 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1925762921] [2021-12-15 17:13:16,274 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:16,274 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:16,274 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:16,274 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:13:16,275 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:13:16,275 INFO L87 Difference]: Start difference. First operand 23775 states and 43693 transitions. cyclomatic complexity: 19919 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:17,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:17,361 INFO L93 Difference]: Finished difference Result 30302 states and 55601 transitions. [2021-12-15 17:13:17,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-15 17:13:17,362 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30302 states and 55601 transitions. [2021-12-15 17:13:17,497 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25366 [2021-12-15 17:13:17,580 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30302 states to 30302 states and 55601 transitions. [2021-12-15 17:13:17,581 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30302 [2021-12-15 17:13:17,601 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30302 [2021-12-15 17:13:17,601 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30302 states and 55601 transitions. [2021-12-15 17:13:17,621 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:17,621 INFO L681 BuchiCegarLoop]: Abstraction has 30302 states and 55601 transitions. [2021-12-15 17:13:17,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30302 states and 55601 transitions. [2021-12-15 17:13:17,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30302 to 16576. [2021-12-15 17:13:17,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16576 states, 16576 states have (on average 1.8295728764478765) internal successors, (30327), 16575 states have internal predecessors, (30327), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:17,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16576 states to 16576 states and 30327 transitions. [2021-12-15 17:13:17,854 INFO L704 BuchiCegarLoop]: Abstraction has 16576 states and 30327 transitions. [2021-12-15 17:13:17,854 INFO L587 BuchiCegarLoop]: Abstraction has 16576 states and 30327 transitions. [2021-12-15 17:13:17,854 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-15 17:13:17,854 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16576 states and 30327 transitions. [2021-12-15 17:13:17,904 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13223 [2021-12-15 17:13:17,904 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:17,904 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:17,905 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:17,905 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:17,906 INFO L791 eck$LassoCheckResult]: Stem: 311787#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 311788#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 312998#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 312823#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 312824#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 311261#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 311262#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 313030#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 313108#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 311656#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 311657#L1463 assume 0 == initPersonOnFloor_~floor#1; 313201#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 311061#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 311918#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 310810#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 310811#L1255 assume !(0 == callOnFloor_~floorID#1); 312531#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 311359#L1267-2 assume { :end_inline_callOnFloor } true; 313305#L1607 assume { :end_inline_initPersonOnFloor } true; 313302#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 313298#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 313295#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 313293#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 313265#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 313260#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 313258#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 313254#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 313253#L1255-2 assume !(0 == callOnFloor_~floorID#1); 313252#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 313248#L1267-5 assume { :end_inline_callOnFloor } true; 313247#L1607-1 assume { :end_inline_initPersonOnFloor } true; 313246#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 313245#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 313244#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 313243#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 311500#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 311501#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 313111#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 313112#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 313261#L2908 assume !(0 != timeShift_~tmp___9~2#1); 313154#L2999 assume !(1 == ~doorState~0); 312271#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 311864#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 311865#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 312913#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 312457#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 312458#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 312869#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 312493#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 311942#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 311863#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 313037#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 311205#L2727-2 assume !(1 == ~currentHeading~0); 311027#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 311028#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 312131#L2743-5 assume { :end_inline_continueInDirection } true; 310993#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 313387#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 313386#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 313384#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 313381#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 313372#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 313366#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 313364#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 313363#L707-2 [2021-12-15 17:13:17,906 INFO L793 eck$LassoCheckResult]: Loop: 313363#L707-2 assume !false; 313362#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 313361#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 313360#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 313359#L715 assume 1 != cleanup_~tmp___0~2#1; 313358#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 313356#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 313355#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 313354#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 313353#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 313352#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 313351#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 313348#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 313350#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 313845#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 313844#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 313821#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 313338#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 313336#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 313334#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 313335#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 313461#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 313460#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 313458#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 313457#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 313456#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 313454#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 313455#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 313444#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 313647#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 313425#L2782-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~24#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 313639#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 313634#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 313517#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 313497#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 313494#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 313492#L2727-5 assume !(1 == ~currentHeading~0); 313490#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 313415#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 313412#L2743-11 assume { :end_inline_continueInDirection } true; 313410#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 313409#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 313408#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 313406#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 313403#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 313394#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 313388#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 313365#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 313363#L707-2 [2021-12-15 17:13:17,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:17,907 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 1 times [2021-12-15 17:13:17,907 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:17,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1257700343] [2021-12-15 17:13:17,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:17,907 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:17,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:17,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:17,926 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:17,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1257700343] [2021-12-15 17:13:17,926 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1257700343] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:17,927 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:17,927 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:17,927 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [563450704] [2021-12-15 17:13:17,927 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:17,927 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:17,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:17,928 INFO L85 PathProgramCache]: Analyzing trace with hash -875513639, now seen corresponding path program 1 times [2021-12-15 17:13:17,928 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:17,928 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [332528176] [2021-12-15 17:13:17,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:17,928 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:17,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:17,945 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:17,945 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:17,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [332528176] [2021-12-15 17:13:17,945 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [332528176] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:17,945 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:17,945 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:13:17,946 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149402109] [2021-12-15 17:13:17,946 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:17,946 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:17,947 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:17,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:13:17,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:13:17,948 INFO L87 Difference]: Start difference. First operand 16576 states and 30327 transitions. cyclomatic complexity: 13752 Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:18,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:18,293 INFO L93 Difference]: Finished difference Result 52928 states and 96998 transitions. [2021-12-15 17:13:18,293 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:13:18,294 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52928 states and 96998 transitions. [2021-12-15 17:13:18,554 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 49409 [2021-12-15 17:13:18,744 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52928 states to 52928 states and 96998 transitions. [2021-12-15 17:13:18,745 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52928 [2021-12-15 17:13:18,790 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52928 [2021-12-15 17:13:18,791 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52928 states and 96998 transitions. [2021-12-15 17:13:18,828 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:18,828 INFO L681 BuchiCegarLoop]: Abstraction has 52928 states and 96998 transitions. [2021-12-15 17:13:18,859 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52928 states and 96998 transitions. [2021-12-15 17:13:19,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52928 to 16596. [2021-12-15 17:13:19,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16596 states, 16596 states have (on average 1.8285731501566642) internal successors, (30347), 16595 states have internal predecessors, (30347), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:19,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16596 states to 16596 states and 30347 transitions. [2021-12-15 17:13:19,336 INFO L704 BuchiCegarLoop]: Abstraction has 16596 states and 30347 transitions. [2021-12-15 17:13:19,336 INFO L587 BuchiCegarLoop]: Abstraction has 16596 states and 30347 transitions. [2021-12-15 17:13:19,336 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-15 17:13:19,336 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16596 states and 30347 transitions. [2021-12-15 17:13:19,382 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13241 [2021-12-15 17:13:19,382 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:19,382 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:19,383 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:19,383 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:19,383 INFO L791 eck$LassoCheckResult]: Stem: 381316#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 381317#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 382572#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 382381#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 382382#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 380778#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 380779#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 382612#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 382698#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 381183#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 381184#L1463 assume 0 == initPersonOnFloor_~floor#1; 382821#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 380575#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 381450#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 380325#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 380326#L1255 assume !(0 == callOnFloor_~floorID#1); 382074#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 380881#L1267-2 assume { :end_inline_callOnFloor } true; 382955#L1607 assume { :end_inline_initPersonOnFloor } true; 382954#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 382948#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 382945#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 382943#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 382915#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 382911#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 382909#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 382905#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 382904#L1255-2 assume !(0 == callOnFloor_~floorID#1); 382903#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 382899#L1267-5 assume { :end_inline_callOnFloor } true; 382898#L1607-1 assume { :end_inline_initPersonOnFloor } true; 382897#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 382896#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 382895#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 382894#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 381023#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 381024#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 382706#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 382708#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 382956#L2908 assume !(0 != timeShift_~tmp___9~2#1); 382759#L2999 assume !(1 == ~doorState~0); 381807#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 381395#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 381396#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 382484#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 381990#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 381991#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 382431#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 382892#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 381474#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 381394#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 382618#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 380722#L2727-2 assume !(1 == ~currentHeading~0); 380541#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 380542#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 381667#L2743-5 assume { :end_inline_continueInDirection } true; 380507#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 382833#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 382834#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 383253#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 383245#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 383219#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 383216#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 383214#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 383213#L707-2 [2021-12-15 17:13:19,384 INFO L793 eck$LassoCheckResult]: Loop: 383213#L707-2 assume !false; 383212#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 383211#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 383210#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 383209#L715 assume 1 != cleanup_~tmp___0~2#1; 383208#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 383206#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 383205#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 383203#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 383201#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 383187#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 383181#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 383172#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 383139#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 383140#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 383123#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 383124#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 383120#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 383119#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 383118#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 383117#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 383115#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 383114#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 383111#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 383109#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 383077#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 383060#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 383047#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 383035#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 383034#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 383032#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 383031#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 383029#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 380629#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 380630#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 383266#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 383263#L2727-5 assume !(1 == ~currentHeading~0); 383260#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 383259#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 383257#L2743-11 assume { :end_inline_continueInDirection } true; 383255#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 383254#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 383251#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 383252#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 383250#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 383230#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 383217#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 383215#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 383213#L707-2 [2021-12-15 17:13:19,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:19,384 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 2 times [2021-12-15 17:13:19,384 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:19,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2096144524] [2021-12-15 17:13:19,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:19,385 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:19,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:19,403 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:19,403 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:19,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2096144524] [2021-12-15 17:13:19,405 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2096144524] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:19,406 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:19,406 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:19,406 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [327817751] [2021-12-15 17:13:19,406 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:19,406 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:19,406 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:19,407 INFO L85 PathProgramCache]: Analyzing trace with hash 1425308951, now seen corresponding path program 1 times [2021-12-15 17:13:19,407 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:19,407 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [9292451] [2021-12-15 17:13:19,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:19,407 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:19,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:19,427 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:19,428 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:19,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [9292451] [2021-12-15 17:13:19,428 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [9292451] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:19,428 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:19,428 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:13:19,428 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [897153369] [2021-12-15 17:13:19,428 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:19,429 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:19,429 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:19,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:13:19,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:13:19,429 INFO L87 Difference]: Start difference. First operand 16596 states and 30347 transitions. cyclomatic complexity: 13752 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:20,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:20,103 INFO L93 Difference]: Finished difference Result 61600 states and 111440 transitions. [2021-12-15 17:13:20,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-15 17:13:20,104 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 61600 states and 111440 transitions. [2021-12-15 17:13:20,407 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 57972 [2021-12-15 17:13:20,606 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 61600 states to 61600 states and 111440 transitions. [2021-12-15 17:13:20,607 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61600 [2021-12-15 17:13:20,658 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61600 [2021-12-15 17:13:20,658 INFO L73 IsDeterministic]: Start isDeterministic. Operand 61600 states and 111440 transitions. [2021-12-15 17:13:20,701 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:20,701 INFO L681 BuchiCegarLoop]: Abstraction has 61600 states and 111440 transitions. [2021-12-15 17:13:20,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61600 states and 111440 transitions. [2021-12-15 17:13:21,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61600 to 18834. [2021-12-15 17:13:21,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18834 states, 18834 states have (on average 1.8056705957311245) internal successors, (34008), 18833 states have internal predecessors, (34008), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:21,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18834 states to 18834 states and 34008 transitions. [2021-12-15 17:13:21,264 INFO L704 BuchiCegarLoop]: Abstraction has 18834 states and 34008 transitions. [2021-12-15 17:13:21,264 INFO L587 BuchiCegarLoop]: Abstraction has 18834 states and 34008 transitions. [2021-12-15 17:13:21,264 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-15 17:13:21,264 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18834 states and 34008 transitions. [2021-12-15 17:13:21,323 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15322 [2021-12-15 17:13:21,324 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:21,324 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:21,326 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:21,326 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:21,326 INFO L791 eck$LassoCheckResult]: Stem: 459522#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 459523#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 460749#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 460565#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 460566#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 458992#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 458993#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 460783#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 460861#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 459389#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 459390#L1463 assume 0 == initPersonOnFloor_~floor#1; 460965#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 458792#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 459652#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 458540#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 458541#L1255 assume !(0 == callOnFloor_~floorID#1); 460278#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 459093#L1267-2 assume { :end_inline_callOnFloor } true; 461092#L1607 assume { :end_inline_initPersonOnFloor } true; 461091#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 461087#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 461083#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 461080#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 461052#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 461048#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 461046#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 461042#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 461041#L1255-2 assume !(0 == callOnFloor_~floorID#1); 461040#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 461036#L1267-5 assume { :end_inline_callOnFloor } true; 461035#L1607-1 assume { :end_inline_initPersonOnFloor } true; 461034#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 461033#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 461032#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 461031#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 459233#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 459234#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 460867#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 460868#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 461093#L2908 assume !(0 != timeShift_~tmp___9~2#1); 460910#L2999 assume !(1 == ~doorState~0); 460011#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 459599#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 459600#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 460658#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 460197#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 460198#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 461095#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 461096#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 461145#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 461130#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 461129#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 461127#L2727-2 assume !(1 == ~currentHeading~0); 458758#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 458759#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 460849#L2743-5 assume { :end_inline_continueInDirection } true; 458724#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 466759#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 466758#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 466757#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 466756#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 466751#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 466744#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 466742#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 466741#L707-2 [2021-12-15 17:13:21,326 INFO L793 eck$LassoCheckResult]: Loop: 466741#L707-2 assume !false; 466718#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 466716#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 464721#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 464719#L715 assume 1 != cleanup_~tmp___0~2#1; 464717#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 464713#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 464711#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 464709#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 464701#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 464700#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 464694#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 464661#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 464638#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 464636#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 464634#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 464632#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 464630#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 464628#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 464626#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 464624#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 464621#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 464619#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 464616#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 464613#L2999-3 assume !(1 == ~doorState~0); 464614#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 466983#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 466984#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 466848#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 467138#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 466817#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 466962#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 466960#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 466917#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 466831#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 466822#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 466810#L2727-5 assume !(1 == ~currentHeading~0); 466801#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 466795#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 466791#L2743-11 assume { :end_inline_continueInDirection } true; 466788#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 466787#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 466783#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 466779#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 466778#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 466772#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 466766#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 466743#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 466741#L707-2 [2021-12-15 17:13:21,327 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:21,327 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 3 times [2021-12-15 17:13:21,328 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:21,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1018106910] [2021-12-15 17:13:21,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:21,328 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:21,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:21,355 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:21,355 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:21,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1018106910] [2021-12-15 17:13:21,355 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1018106910] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:21,357 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:21,357 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:21,358 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1105801101] [2021-12-15 17:13:21,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:21,358 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:21,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:21,359 INFO L85 PathProgramCache]: Analyzing trace with hash 1291295445, now seen corresponding path program 1 times [2021-12-15 17:13:21,359 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:21,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1140124079] [2021-12-15 17:13:21,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:21,359 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:21,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:21,422 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:21,422 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:21,422 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1140124079] [2021-12-15 17:13:21,422 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1140124079] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:21,422 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:21,422 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-15 17:13:21,422 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [920270772] [2021-12-15 17:13:21,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:21,423 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:21,423 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:21,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-15 17:13:21,423 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-12-15 17:13:21,424 INFO L87 Difference]: Start difference. First operand 18834 states and 34008 transitions. cyclomatic complexity: 15175 Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 7 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:23,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:23,261 INFO L93 Difference]: Finished difference Result 71938 states and 129028 transitions. [2021-12-15 17:13:23,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-12-15 17:13:23,262 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 71938 states and 129028 transitions. [2021-12-15 17:13:23,738 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 68322 [2021-12-15 17:13:23,973 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 71938 states to 71918 states and 129008 transitions. [2021-12-15 17:13:23,973 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 71918 [2021-12-15 17:13:24,029 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 71918 [2021-12-15 17:13:24,030 INFO L73 IsDeterministic]: Start isDeterministic. Operand 71918 states and 129008 transitions. [2021-12-15 17:13:24,081 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:24,081 INFO L681 BuchiCegarLoop]: Abstraction has 71918 states and 129008 transitions. [2021-12-15 17:13:24,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71918 states and 129008 transitions. [2021-12-15 17:13:24,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71918 to 41316. [2021-12-15 17:13:24,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41316 states, 41316 states have (on average 1.811162745667538) internal successors, (74830), 41315 states have internal predecessors, (74830), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:24,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41316 states to 41316 states and 74830 transitions. [2021-12-15 17:13:24,788 INFO L704 BuchiCegarLoop]: Abstraction has 41316 states and 74830 transitions. [2021-12-15 17:13:24,788 INFO L587 BuchiCegarLoop]: Abstraction has 41316 states and 74830 transitions. [2021-12-15 17:13:24,788 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-12-15 17:13:24,788 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41316 states and 74830 transitions. [2021-12-15 17:13:24,935 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 37756 [2021-12-15 17:13:24,935 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:24,935 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:24,936 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:24,936 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:24,936 INFO L791 eck$LassoCheckResult]: Stem: 550342#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 550343#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 551619#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 551416#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 551417#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 549801#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 549802#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 551657#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 551744#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 550203#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 550204#L1463 assume 0 == initPersonOnFloor_~floor#1; 551862#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 549597#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 550474#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 549346#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 549347#L1255 assume !(0 == callOnFloor_~floorID#1); 551110#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 549901#L1267-2 assume { :end_inline_callOnFloor } true; 551994#L1607 assume { :end_inline_initPersonOnFloor } true; 551993#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 551987#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 551984#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 551982#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 551954#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 551950#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 551948#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 551944#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 551943#L1255-2 assume !(0 == callOnFloor_~floorID#1); 551942#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 551938#L1267-5 assume { :end_inline_callOnFloor } true; 551937#L1607-1 assume { :end_inline_initPersonOnFloor } true; 551936#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 551935#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 551934#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 551933#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 550043#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 550044#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 551750#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 551752#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 551995#L2908 assume !(0 != timeShift_~tmp___9~2#1); 551801#L2999 assume !(1 == ~doorState~0); 550841#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 550416#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 550417#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 551516#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 551028#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 551029#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 551998#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 551999#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 552059#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 552044#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 552043#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 552041#L2727-2 assume !(1 == ~currentHeading~0); 549566#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 549567#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 551732#L2743-5 assume { :end_inline_continueInDirection } true; 549529#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 571152#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 571151#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 551718#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 551719#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 552008#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 552009#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 572295#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 572292#L707-2 [2021-12-15 17:13:24,937 INFO L793 eck$LassoCheckResult]: Loop: 572292#L707-2 assume !false; 572289#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 572287#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 572046#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 572045#L715 assume 1 != cleanup_~tmp___0~2#1; 557087#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 557084#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 557077#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 557075#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 557074#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 557073#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 557068#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 557065#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 557017#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 557014#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 557010#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 557006#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 557002#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 556997#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 556996#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 556991#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 556984#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 556973#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 556967#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 556961#L2999-3 assume !(1 == ~doorState~0); 556962#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 576968#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 576969#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 576866#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 577062#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 576846#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 577059#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 577058#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 577000#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 576979#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 576976#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 576974#L2727-5 assume !(1 == ~currentHeading~0); 576972#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 576971#L2737-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 576772#L2743-11 assume { :end_inline_continueInDirection } true; 573166#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 573165#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 573164#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 573163#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 573162#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 573106#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 572325#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 572294#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 572292#L707-2 [2021-12-15 17:13:24,937 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:24,937 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 4 times [2021-12-15 17:13:24,937 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:24,937 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1753747911] [2021-12-15 17:13:24,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:24,938 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:24,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:24,978 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:24,978 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:24,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1753747911] [2021-12-15 17:13:24,979 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1753747911] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:24,979 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:24,979 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:24,979 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [784577716] [2021-12-15 17:13:24,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:24,980 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:24,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:24,980 INFO L85 PathProgramCache]: Analyzing trace with hash 898268435, now seen corresponding path program 1 times [2021-12-15 17:13:24,980 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:24,980 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1028870237] [2021-12-15 17:13:24,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:24,981 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:24,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:24,996 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:24,996 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:24,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1028870237] [2021-12-15 17:13:24,996 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1028870237] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:24,996 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:24,997 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:24,997 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [147354500] [2021-12-15 17:13:24,997 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:24,997 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:24,997 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:24,997 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:13:24,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:13:24,998 INFO L87 Difference]: Start difference. First operand 41316 states and 74830 transitions. cyclomatic complexity: 33515 Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:25,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:25,283 INFO L93 Difference]: Finished difference Result 66448 states and 120136 transitions. [2021-12-15 17:13:25,284 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:13:25,284 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66448 states and 120136 transitions. [2021-12-15 17:13:25,810 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 62886 [2021-12-15 17:13:26,016 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66448 states to 66448 states and 120136 transitions. [2021-12-15 17:13:26,016 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66448 [2021-12-15 17:13:26,073 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66448 [2021-12-15 17:13:26,073 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66448 states and 120136 transitions. [2021-12-15 17:13:26,115 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:26,115 INFO L681 BuchiCegarLoop]: Abstraction has 66448 states and 120136 transitions. [2021-12-15 17:13:26,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66448 states and 120136 transitions. [2021-12-15 17:13:26,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66448 to 66366. [2021-12-15 17:13:26,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66366 states, 66366 states have (on average 1.8085766808305457) internal successors, (120028), 66365 states have internal predecessors, (120028), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:27,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66366 states to 66366 states and 120028 transitions. [2021-12-15 17:13:27,024 INFO L704 BuchiCegarLoop]: Abstraction has 66366 states and 120028 transitions. [2021-12-15 17:13:27,024 INFO L587 BuchiCegarLoop]: Abstraction has 66366 states and 120028 transitions. [2021-12-15 17:13:27,024 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-12-15 17:13:27,025 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66366 states and 120028 transitions. [2021-12-15 17:13:27,252 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 62804 [2021-12-15 17:13:27,252 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:27,252 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:27,254 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:27,254 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:27,255 INFO L791 eck$LassoCheckResult]: Stem: 658105#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 658106#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 659373#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 659177#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 659178#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 657568#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 657569#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 659409#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 659491#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 657966#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 657967#L1463 assume 0 == initPersonOnFloor_~floor#1; 659614#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 657366#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 658239#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 657117#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 657118#L1255 assume !(0 == callOnFloor_~floorID#1); 658874#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 657668#L1267-2 assume { :end_inline_callOnFloor } true; 659744#L1607 assume { :end_inline_initPersonOnFloor } true; 659743#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 659739#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 659735#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 659732#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 659704#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 659700#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 659698#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 659694#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 659693#L1255-2 assume !(0 == callOnFloor_~floorID#1); 659692#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 659688#L1267-5 assume { :end_inline_callOnFloor } true; 659687#L1607-1 assume { :end_inline_initPersonOnFloor } true; 659686#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 659685#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 659684#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 659683#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 657809#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 657810#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 659500#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 659501#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 659745#L2908 assume !(0 != timeShift_~tmp___9~2#1); 659558#L2999 assume !(1 == ~doorState~0); 658600#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 658184#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 658185#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 659277#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 658792#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 658793#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 659229#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 659746#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 659747#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 659415#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 659416#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 657512#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 657513#L1766-4 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 659605#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 659606#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 659480#L2743-5 assume { :end_inline_continueInDirection } true; 657300#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 664420#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 664410#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 664411#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 664412#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 664400#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 664386#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 664350#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 664348#L707-2 [2021-12-15 17:13:27,255 INFO L793 eck$LassoCheckResult]: Loop: 664348#L707-2 assume !false; 664345#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 664343#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 664340#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 664338#L715 assume 1 != cleanup_~tmp___0~2#1; 664336#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 664333#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 664332#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 664330#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 664325#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 664324#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 664312#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 664283#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 664268#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 664265#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 664261#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 664258#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 664011#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 664009#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 664006#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 664005#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 664003#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 664002#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 664000#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 663998#L2999-3 assume !(1 == ~doorState~0); 663996#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 663978#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 663965#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 663955#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 663935#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 663933#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 663930#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 663929#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 663910#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 663891#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 663889#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 663885#L2727-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 663886#L1766-9 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 664504#L2731-15 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 664495#L2737-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 664422#L2743-11 assume { :end_inline_continueInDirection } true; 664419#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 664418#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 664415#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 664416#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 664417#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 664360#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 664353#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 664351#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 664348#L707-2 [2021-12-15 17:13:27,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:27,256 INFO L85 PathProgramCache]: Analyzing trace with hash -2108163676, now seen corresponding path program 1 times [2021-12-15 17:13:27,256 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:27,256 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325220684] [2021-12-15 17:13:27,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:27,256 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:27,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:27,278 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:27,278 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:27,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325220684] [2021-12-15 17:13:27,278 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325220684] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:27,278 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:27,279 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:27,279 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1761666377] [2021-12-15 17:13:27,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:27,279 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:27,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:27,280 INFO L85 PathProgramCache]: Analyzing trace with hash 245506912, now seen corresponding path program 1 times [2021-12-15 17:13:27,280 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:27,280 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [671634301] [2021-12-15 17:13:27,280 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:27,280 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:27,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:27,302 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:27,302 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:27,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [671634301] [2021-12-15 17:13:27,303 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [671634301] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:27,303 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:27,303 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:13:27,303 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [261202423] [2021-12-15 17:13:27,303 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:27,303 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:27,303 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:27,304 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:13:27,304 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:13:27,304 INFO L87 Difference]: Start difference. First operand 66366 states and 120028 transitions. cyclomatic complexity: 53663 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:28,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:28,034 INFO L93 Difference]: Finished difference Result 109776 states and 199430 transitions. [2021-12-15 17:13:28,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:13:28,035 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109776 states and 199430 transitions. [2021-12-15 17:13:28,582 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 106022 [2021-12-15 17:13:29,245 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109776 states to 109748 states and 199394 transitions. [2021-12-15 17:13:29,246 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 109748 [2021-12-15 17:13:29,345 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 109748 [2021-12-15 17:13:29,345 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109748 states and 199394 transitions. [2021-12-15 17:13:29,424 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:29,424 INFO L681 BuchiCegarLoop]: Abstraction has 109748 states and 199394 transitions. [2021-12-15 17:13:29,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109748 states and 199394 transitions. [2021-12-15 17:13:30,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109748 to 62386. [2021-12-15 17:13:30,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62386 states, 62386 states have (on average 1.8021992113615235) internal successors, (112432), 62385 states have internal predecessors, (112432), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:30,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62386 states to 62386 states and 112432 transitions. [2021-12-15 17:13:30,587 INFO L704 BuchiCegarLoop]: Abstraction has 62386 states and 112432 transitions. [2021-12-15 17:13:30,587 INFO L587 BuchiCegarLoop]: Abstraction has 62386 states and 112432 transitions. [2021-12-15 17:13:30,587 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-12-15 17:13:30,587 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62386 states and 112432 transitions. [2021-12-15 17:13:30,770 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 58706 [2021-12-15 17:13:30,770 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:30,770 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:30,772 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:30,772 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:30,772 INFO L791 eck$LassoCheckResult]: Stem: 834257#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 834258#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 835537#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 835338#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 835339#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 833723#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 833724#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 835575#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 835655#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 834123#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 834124#L1463 assume 0 == initPersonOnFloor_~floor#1; 835768#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 833519#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 834394#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 833270#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 833271#L1255 assume !(0 == callOnFloor_~floorID#1); 835036#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 833824#L1267-2 assume { :end_inline_callOnFloor } true; 835893#L1607 assume { :end_inline_initPersonOnFloor } true; 835892#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 835888#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 835885#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 835883#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 835855#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 835851#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 835849#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 835845#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 835844#L1255-2 assume !(0 == callOnFloor_~floorID#1); 835843#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 835839#L1267-5 assume { :end_inline_callOnFloor } true; 835838#L1607-1 assume { :end_inline_initPersonOnFloor } true; 835837#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 835836#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 835835#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 835834#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 833965#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 833966#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 835662#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 835664#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 835896#L2908 assume !(0 != timeShift_~tmp___9~2#1); 835715#L2999 assume !(1 == ~doorState~0); 834752#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 834336#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 834338#L1766 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 835407#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 835441#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 835974#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 835948#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 835930#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 835927#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 835928#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 835905#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 835906#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 833666#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 833667#L1766-4 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 835754#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 835755#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 836000#L2743-5 assume { :end_inline_continueInDirection } true; 835999#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 856268#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 856267#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 856265#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 856262#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 856253#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 856247#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 856245#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 856242#L707-2 [2021-12-15 17:13:30,772 INFO L793 eck$LassoCheckResult]: Loop: 856242#L707-2 assume !false; 856241#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 856240#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 856239#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 856238#L715 assume 1 != cleanup_~tmp___0~2#1; 856237#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 856234#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 856236#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 865410#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 865409#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 856223#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 856219#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 856220#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 855455#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 855456#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 854828#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 854829#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 865374#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 865373#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 865371#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 865369#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 865367#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 865364#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 865362#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 865357#L2999-3 assume !(1 == ~doorState~0); 865358#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 866180#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 866178#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 866175#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 865589#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 865587#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 865586#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 865553#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 865554#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 865534#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 865535#L3016-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 859946#L2782-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 858422#L2787-3 timeShift_#t~ret99#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 858423#L2727-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 858420#L1766-8 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 858413#L2731-12 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 858409#L2737-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 858407#L2743-9 assume { :end_inline_continueInDirection } true; 858405#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 865414#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 865413#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 865412#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 865411#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 858381#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 856432#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 856246#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 856242#L707-2 [2021-12-15 17:13:30,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:30,772 INFO L85 PathProgramCache]: Analyzing trace with hash 1656121101, now seen corresponding path program 1 times [2021-12-15 17:13:30,773 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:30,773 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [447081565] [2021-12-15 17:13:30,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:30,773 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:30,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:30,807 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:30,808 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:30,808 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [447081565] [2021-12-15 17:13:30,808 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [447081565] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:30,808 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:30,808 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:30,808 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [740512433] [2021-12-15 17:13:30,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:30,809 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:30,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:30,809 INFO L85 PathProgramCache]: Analyzing trace with hash 1637862917, now seen corresponding path program 1 times [2021-12-15 17:13:30,809 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:30,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1308709719] [2021-12-15 17:13:30,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:30,809 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:30,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:30,827 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:30,827 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:30,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1308709719] [2021-12-15 17:13:30,827 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1308709719] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:30,828 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:30,828 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:13:30,829 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1237590248] [2021-12-15 17:13:30,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:30,829 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:30,829 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:30,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:13:30,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:13:30,830 INFO L87 Difference]: Start difference. First operand 62386 states and 112432 transitions. cyclomatic complexity: 50047 Second operand has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:31,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:31,300 INFO L93 Difference]: Finished difference Result 112702 states and 203708 transitions. [2021-12-15 17:13:31,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:13:31,301 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 112702 states and 203708 transitions. [2021-12-15 17:13:32,233 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 108712 [2021-12-15 17:13:32,611 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 112702 states to 112594 states and 203488 transitions. [2021-12-15 17:13:32,611 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 112594 [2021-12-15 17:13:32,726 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 112594 [2021-12-15 17:13:32,726 INFO L73 IsDeterministic]: Start isDeterministic. Operand 112594 states and 203488 transitions. [2021-12-15 17:13:32,810 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:32,810 INFO L681 BuchiCegarLoop]: Abstraction has 112594 states and 203488 transitions. [2021-12-15 17:13:32,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112594 states and 203488 transitions. [2021-12-15 17:13:33,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112594 to 62240. [2021-12-15 17:13:33,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62240 states, 62240 states have (on average 1.8000964010282776) internal successors, (112038), 62239 states have internal predecessors, (112038), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:33,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62240 states to 62240 states and 112038 transitions. [2021-12-15 17:13:33,862 INFO L704 BuchiCegarLoop]: Abstraction has 62240 states and 112038 transitions. [2021-12-15 17:13:33,862 INFO L587 BuchiCegarLoop]: Abstraction has 62240 states and 112038 transitions. [2021-12-15 17:13:33,862 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-12-15 17:13:33,863 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62240 states and 112038 transitions. [2021-12-15 17:13:34,066 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 58562 [2021-12-15 17:13:34,067 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:34,067 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:34,068 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:34,068 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:34,069 INFO L791 eck$LassoCheckResult]: Stem: 1009357#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1009358#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1010627#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1010427#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1010428#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1008821#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1008822#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1010664#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1010747#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1009222#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1009223#L1463 assume 0 == initPersonOnFloor_~floor#1; 1010867#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1008618#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1009493#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1008369#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1008370#L1255 assume !(0 == callOnFloor_~floorID#1); 1010133#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1008922#L1267-2 assume { :end_inline_callOnFloor } true; 1010998#L1607 assume { :end_inline_initPersonOnFloor } true; 1010997#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1010993#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1010990#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1010988#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 1010960#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1010956#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1010954#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1010950#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1010949#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1010948#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1010944#L1267-5 assume { :end_inline_callOnFloor } true; 1010943#L1607-1 assume { :end_inline_initPersonOnFloor } true; 1010942#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1010941#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1010940#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1010939#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1009063#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1009064#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1010753#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1010754#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1011001#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1010805#L2999 assume !(1 == ~doorState~0); 1009858#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1009440#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1009442#L1766 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1010492#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1010527#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1011013#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1011014#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1011310#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1011002#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1009517#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1009518#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1010796#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1010797#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1010894#L1766-4 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1010895#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1009715#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1009716#L2743-5 assume { :end_inline_continueInDirection } true; 1008554#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1010303#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1011101#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1010716#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1010717#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1010816#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1011204#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1037746#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1037744#L707-2 [2021-12-15 17:13:34,069 INFO L793 eck$LassoCheckResult]: Loop: 1037744#L707-2 assume !false; 1037742#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1037740#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1037738#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1037736#L715 assume 1 != cleanup_~tmp___0~2#1; 1037734#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1037731#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 1037728#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 1037726#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 1037724#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 1037722#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1037720#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1037717#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1037289#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1037264#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1021428#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1021429#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1037168#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1037163#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1037158#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1037153#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1037146#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1037130#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1037120#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1037111#L2999-3 assume !(1 == ~doorState~0); 1037112#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1063845#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1063844#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1063843#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1063842#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1063840#L2782-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~24#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1063841#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1041326#L2351-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1041324#L1766-7 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1041325#L2355-3 assume !(0 != stopRequestedInDirection_~tmp~20#1); 1063806#L2361-3 assume !(~currentFloorID~0 < 0); 1063812#L2376-3 assume !(~currentFloorID~0 < 0); 1063811#L2389-3 assume ~currentFloorID~0 < 1; 1063809#L2391-3 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 1063804#L2405-3 assume ~currentFloorID~0 < 1; 1041225#L2407-3 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 1041226#L2408-3 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1041134#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1041135#L3016-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1040962#L2782-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1040963#L2787-3 timeShift_#t~ret99#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1040951#L2727-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1040949#L1766-8 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1040946#L2731-12 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1036307#L2737-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1040943#L2743-9 assume { :end_inline_continueInDirection } true; 1040935#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1040927#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1040921#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1040922#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1040923#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1037764#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1037749#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1037747#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1037744#L707-2 [2021-12-15 17:13:34,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:34,069 INFO L85 PathProgramCache]: Analyzing trace with hash 1656121101, now seen corresponding path program 2 times [2021-12-15 17:13:34,069 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:34,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [220076434] [2021-12-15 17:13:34,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:34,070 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:34,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:34,088 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:34,088 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:34,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [220076434] [2021-12-15 17:13:34,088 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [220076434] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:34,088 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:34,088 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:34,089 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1245119529] [2021-12-15 17:13:34,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:34,089 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:34,089 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:34,089 INFO L85 PathProgramCache]: Analyzing trace with hash 591855693, now seen corresponding path program 1 times [2021-12-15 17:13:34,089 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:34,090 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [855571155] [2021-12-15 17:13:34,090 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:34,090 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:34,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:34,140 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:34,140 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:34,140 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [855571155] [2021-12-15 17:13:34,140 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [855571155] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:34,140 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:34,141 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-15 17:13:34,141 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1544113976] [2021-12-15 17:13:34,141 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:34,141 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:34,141 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:34,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-15 17:13:34,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-15 17:13:34,143 INFO L87 Difference]: Start difference. First operand 62240 states and 112038 transitions. cyclomatic complexity: 49799 Second operand has 6 states, 6 states have (on average 9.833333333333334) internal successors, (59), 6 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:35,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:35,702 INFO L93 Difference]: Finished difference Result 206428 states and 374582 transitions. [2021-12-15 17:13:35,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-15 17:13:35,703 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 206428 states and 374582 transitions. [2021-12-15 17:13:37,156 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 202473 [2021-12-15 17:13:37,819 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 206428 states to 206428 states and 374582 transitions. [2021-12-15 17:13:37,820 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 206428 [2021-12-15 17:13:38,005 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 206428 [2021-12-15 17:13:38,005 INFO L73 IsDeterministic]: Start isDeterministic. Operand 206428 states and 374582 transitions. [2021-12-15 17:13:38,491 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:38,491 INFO L681 BuchiCegarLoop]: Abstraction has 206428 states and 374582 transitions. [2021-12-15 17:13:38,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206428 states and 374582 transitions. [2021-12-15 17:13:39,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206428 to 62240. [2021-12-15 17:13:39,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62240 states, 62240 states have (on average 1.7887853470437018) internal successors, (111334), 62239 states have internal predecessors, (111334), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:39,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62240 states to 62240 states and 111334 transitions. [2021-12-15 17:13:39,650 INFO L704 BuchiCegarLoop]: Abstraction has 62240 states and 111334 transitions. [2021-12-15 17:13:39,650 INFO L587 BuchiCegarLoop]: Abstraction has 62240 states and 111334 transitions. [2021-12-15 17:13:39,650 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-12-15 17:13:39,650 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62240 states and 111334 transitions. [2021-12-15 17:13:40,133 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 58562 [2021-12-15 17:13:40,133 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:40,133 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:40,135 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:40,136 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:40,136 INFO L791 eck$LassoCheckResult]: Stem: 1278055#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1278056#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1279338#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1279141#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1279142#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1277519#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1277520#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1279379#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1279470#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1277922#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1277923#L1463 assume 0 == initPersonOnFloor_~floor#1; 1279599#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1277319#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1278189#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1277069#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1277070#L1255 assume !(0 == callOnFloor_~floorID#1); 1278838#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1277622#L1267-2 assume { :end_inline_callOnFloor } true; 1279736#L1607 assume { :end_inline_initPersonOnFloor } true; 1279735#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1279731#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1279728#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1279726#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 1279698#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1279694#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1279692#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1279688#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1279687#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1279686#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1279682#L1267-5 assume { :end_inline_callOnFloor } true; 1279681#L1607-1 assume { :end_inline_initPersonOnFloor } true; 1279680#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1279679#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1279678#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1279677#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1277764#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1277765#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1279481#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1279482#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1279739#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1279535#L2999 assume !(1 == ~doorState~0); 1278554#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1278135#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1278137#L1766 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1279210#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1279244#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1279322#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1279744#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1279745#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1279740#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1279741#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1279803#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1279804#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1277463#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1277464#L1766-4 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1279587#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1279588#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1279457#L2743-5 assume { :end_inline_continueInDirection } true; 1277254#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1282881#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1282879#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1282880#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1279545#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1279546#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1282858#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1282855#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1282854#L707-2 [2021-12-15 17:13:40,136 INFO L793 eck$LassoCheckResult]: Loop: 1282854#L707-2 assume !false; 1282845#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1282846#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1282838#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1282839#L715 assume 1 != cleanup_~tmp___0~2#1; 1282742#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1282743#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 1292773#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 1292772#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 1282605#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 1282606#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1282586#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1282587#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1282562#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1282563#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1282558#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1282559#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1292754#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1292752#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1292750#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1292748#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1292745#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1292742#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1292739#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1292716#L2999-3 assume !(1 == ~doorState~0); 1292717#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1309032#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1309030#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1309013#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1309005#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1309003#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1308989#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1308990#L2351-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1308985#L1766-7 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1308984#L2355-3 assume !(0 != stopRequestedInDirection_~tmp~20#1); 1308983#L2361-3 assume !(~currentFloorID~0 < 0); 1308982#L2376-3 assume !(~currentFloorID~0 < 0); 1308981#L2389-3 assume ~currentFloorID~0 < 1; 1308979#L2391-3 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1308976#L1188-38 assume !(0 == isFloorCalling_~floorID#1); 1308959#L1192-38 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1308914#L1215-38 stopRequestedInDirection_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 1308883#L2395-3 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1308881#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1308878#L3016-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1308876#L2782-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1308647#L2787-3 timeShift_#t~ret99#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1287583#L2727-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1287585#L1766-8 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1286827#L2731-12 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1286823#L2737-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1286815#L2743-9 assume { :end_inline_continueInDirection } true; 1286813#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1292785#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1292782#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1292783#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1292784#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1286783#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1286779#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1282853#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1282854#L707-2 [2021-12-15 17:13:40,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:40,137 INFO L85 PathProgramCache]: Analyzing trace with hash 1656121101, now seen corresponding path program 3 times [2021-12-15 17:13:40,137 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:40,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1717908104] [2021-12-15 17:13:40,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:40,137 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:40,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:40,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:40,170 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:40,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1717908104] [2021-12-15 17:13:40,170 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1717908104] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:40,170 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:40,170 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:40,170 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1751654431] [2021-12-15 17:13:40,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:40,171 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:40,171 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:40,171 INFO L85 PathProgramCache]: Analyzing trace with hash 285849327, now seen corresponding path program 1 times [2021-12-15 17:13:40,171 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:40,171 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1737067967] [2021-12-15 17:13:40,171 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:40,171 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:40,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:40,196 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:40,197 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:40,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1737067967] [2021-12-15 17:13:40,197 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1737067967] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:40,197 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:40,197 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:13:40,197 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1920267676] [2021-12-15 17:13:40,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:40,198 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:40,198 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:40,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:13:40,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:13:40,198 INFO L87 Difference]: Start difference. First operand 62240 states and 111334 transitions. cyclomatic complexity: 49095 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:40,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:40,816 INFO L93 Difference]: Finished difference Result 185856 states and 336594 transitions. [2021-12-15 17:13:40,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:13:40,819 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 185856 states and 336594 transitions. [2021-12-15 17:13:42,031 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 181950 [2021-12-15 17:13:42,528 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 185856 states to 185844 states and 336582 transitions. [2021-12-15 17:13:42,528 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 185844 [2021-12-15 17:13:42,661 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 185844 [2021-12-15 17:13:42,661 INFO L73 IsDeterministic]: Start isDeterministic. Operand 185844 states and 336582 transitions. [2021-12-15 17:13:42,772 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:42,772 INFO L681 BuchiCegarLoop]: Abstraction has 185844 states and 336582 transitions. [2021-12-15 17:13:42,873 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185844 states and 336582 transitions. [2021-12-15 17:13:44,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185844 to 62176. [2021-12-15 17:13:44,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62176 states, 62176 states have (on average 1.7877316006176016) internal successors, (111154), 62175 states have internal predecessors, (111154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:44,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62176 states to 62176 states and 111154 transitions. [2021-12-15 17:13:44,264 INFO L704 BuchiCegarLoop]: Abstraction has 62176 states and 111154 transitions. [2021-12-15 17:13:44,264 INFO L587 BuchiCegarLoop]: Abstraction has 62176 states and 111154 transitions. [2021-12-15 17:13:44,264 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-12-15 17:13:44,264 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62176 states and 111154 transitions. [2021-12-15 17:13:44,467 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 58498 [2021-12-15 17:13:44,468 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:44,468 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:44,469 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:44,470 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:44,470 INFO L791 eck$LassoCheckResult]: Stem: 1526164#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1526165#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1527452#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1527248#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1527249#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1525623#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1525624#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1527489#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1527581#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1526026#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1526027#L1463 assume 0 == initPersonOnFloor_~floor#1; 1527709#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1525421#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1526301#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1525175#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1525176#L1255 assume !(0 == callOnFloor_~floorID#1); 1526940#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1525727#L1267-2 assume { :end_inline_callOnFloor } true; 1527856#L1607 assume { :end_inline_initPersonOnFloor } true; 1527855#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1527851#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1527848#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1527846#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 1527818#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1527814#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1527812#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1527808#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1527807#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1527806#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1527802#L1267-5 assume { :end_inline_callOnFloor } true; 1527801#L1607-1 assume { :end_inline_initPersonOnFloor } true; 1527800#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1527799#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1527798#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1527797#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1525867#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1525868#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1527589#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1527591#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1527859#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1527644#L2999 assume !(1 == ~doorState~0); 1526664#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1526245#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1526247#L1766 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1527317#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1527353#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1527436#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1527865#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1527867#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1527861#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1527862#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1527665#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1528000#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1525565#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1525566#L1766-4 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1527694#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1527695#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1527568#L2743-5 assume { :end_inline_continueInDirection } true; 1525357#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1527119#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1527724#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1527548#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1527549#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1527657#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1527960#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1554180#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1554178#L707-2 [2021-12-15 17:13:44,470 INFO L793 eck$LassoCheckResult]: Loop: 1554178#L707-2 assume !false; 1554175#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1554173#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1554170#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1554168#L715 assume 1 != cleanup_~tmp___0~2#1; 1554166#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1554163#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 1554162#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 1554160#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 1554155#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 1554154#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1554142#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1554118#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1554105#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1554103#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1553623#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1553624#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1554082#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1554073#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1554062#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1554050#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1554038#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1554024#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1554012#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1553585#L2999-3 assume !(1 == ~doorState~0); 1553586#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1558182#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1558183#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1558164#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1558144#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1558142#L2782-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~24#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1558141#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1558140#L2351-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1558135#L1766-7 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1558132#L2355-3 assume !(0 != stopRequestedInDirection_~tmp~20#1); 1558131#L2361-3 assume !(~currentFloorID~0 < 0); 1558130#L2376-3 assume !(~currentFloorID~0 < 0); 1558129#L2389-3 assume ~currentFloorID~0 < 1; 1558128#L2391-3 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1558127#L1188-38 assume !(0 == isFloorCalling_~floorID#1); 1558105#L1192-38 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1558087#L1215-38 stopRequestedInDirection_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 1558088#L2395-3 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1558069#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1558070#L3016-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1558064#L2782-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1558065#L2787-3 timeShift_#t~ret99#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1554314#L2727-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1554257#L1766-8 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1554252#L2731-12 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1542001#L2737-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1554246#L2743-9 assume { :end_inline_continueInDirection } true; 1554241#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1554239#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1554237#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1554233#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1554216#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1554190#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1554183#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1554181#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1554178#L707-2 [2021-12-15 17:13:44,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:44,471 INFO L85 PathProgramCache]: Analyzing trace with hash 1656121101, now seen corresponding path program 4 times [2021-12-15 17:13:44,471 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:44,471 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [100906919] [2021-12-15 17:13:44,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:44,471 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:44,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:44,492 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:44,492 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:44,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [100906919] [2021-12-15 17:13:44,492 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [100906919] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:44,493 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:44,493 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:44,493 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [193622826] [2021-12-15 17:13:44,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:44,494 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:44,494 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:44,494 INFO L85 PathProgramCache]: Analyzing trace with hash 263217073, now seen corresponding path program 1 times [2021-12-15 17:13:44,494 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:44,495 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1744119660] [2021-12-15 17:13:44,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:44,495 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:44,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:44,519 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:44,519 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:44,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1744119660] [2021-12-15 17:13:44,520 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1744119660] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:44,520 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:44,520 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:13:44,520 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394264571] [2021-12-15 17:13:44,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:44,521 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:44,521 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:44,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:13:44,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:13:44,522 INFO L87 Difference]: Start difference. First operand 62176 states and 111154 transitions. cyclomatic complexity: 48979 Second operand has 5 states, 5 states have (on average 12.0) internal successors, (60), 5 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:45,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:45,593 INFO L93 Difference]: Finished difference Result 177966 states and 320858 transitions. [2021-12-15 17:13:45,593 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-15 17:13:45,593 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 177966 states and 320858 transitions. [2021-12-15 17:13:46,370 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 173882 [2021-12-15 17:13:47,413 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 177966 states to 177836 states and 320577 transitions. [2021-12-15 17:13:47,413 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 177836 [2021-12-15 17:13:47,530 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 177836 [2021-12-15 17:13:47,530 INFO L73 IsDeterministic]: Start isDeterministic. Operand 177836 states and 320577 transitions. [2021-12-15 17:13:47,623 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:47,623 INFO L681 BuchiCegarLoop]: Abstraction has 177836 states and 320577 transitions. [2021-12-15 17:13:47,716 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177836 states and 320577 transitions. [2021-12-15 17:13:48,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177836 to 73985. [2021-12-15 17:13:48,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73985 states, 73985 states have (on average 1.791822666756775) internal successors, (132568), 73984 states have internal predecessors, (132568), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:49,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73985 states to 73985 states and 132568 transitions. [2021-12-15 17:13:49,019 INFO L704 BuchiCegarLoop]: Abstraction has 73985 states and 132568 transitions. [2021-12-15 17:13:49,019 INFO L587 BuchiCegarLoop]: Abstraction has 73985 states and 132568 transitions. [2021-12-15 17:13:49,019 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-12-15 17:13:49,019 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 73985 states and 132568 transitions. [2021-12-15 17:13:49,257 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 70413 [2021-12-15 17:13:49,257 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:49,257 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:49,259 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:49,259 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:49,259 INFO L791 eck$LassoCheckResult]: Stem: 1766308#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1766309#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1767579#L74 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1767380#L67 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1767381#L82 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1765776#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1765777#L875 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1767612#L933 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1767703#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1766173#L1854 bigMacCall_#t~ret40#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1766174#L1463 assume 0 == initPersonOnFloor_~floor#1; 1767819#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1765577#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1766441#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1765329#L952-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1765330#L1255 assume !(0 == callOnFloor_~floorID#1); 1767081#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1765879#L1267-2 assume { :end_inline_callOnFloor } true; 1767956#L1607 assume { :end_inline_initPersonOnFloor } true; 1767955#L679 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1767951#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1767948#L1854-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1767946#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 1767918#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1767914#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1767912#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1767908#L952-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1767907#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1767906#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1767902#L1267-5 assume { :end_inline_callOnFloor } true; 1767901#L1607-1 assume { :end_inline_initPersonOnFloor } true; 1767900#L646 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1767899#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1767898#L1215 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1767897#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1766019#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1766020#L2185 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1767712#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1767714#L2772 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1767959#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1767765#L2999 assume !(1 == ~doorState~0); 1766805#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1766388#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1766390#L1766 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1767449#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1767483#L2673 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1767564#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1767964#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1767963#L2787 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1767961#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1767962#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1767974#L2673-1 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1767975#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1765719#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1765720#L1766-4 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1767803#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1767804#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1767690#L2743-5 assume { :end_inline_continueInDirection } true; 1765512#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1767252#L2147 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1767979#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1767674#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1767675#L2156 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1767774#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1767986#L1038 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1789612#L3031 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1789611#L707-2 [2021-12-15 17:13:49,260 INFO L793 eck$LassoCheckResult]: Loop: 1789611#L707-2 assume !false; 1789610#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1789608#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1789595#L1974 cleanup_#t~ret41#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1789589#L715 assume 1 != cleanup_~tmp___0~2#1; 1789565#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1789554#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 1789548#L1192-21 assume !(1 == isFloorCalling_~floorID#1); 1789539#L1196-21 assume !(2 == isFloorCalling_~floorID#1); 1789533#L1200-21 assume !(3 == isFloorCalling_~floorID#1); 1789354#L1204-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~7#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1783303#L1215-21 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1779163#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1779118#L2319 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1779119#L2332 cleanup_#t~ret42#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1778724#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1778725#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1794202#L1215-26 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1795068#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1795066#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1795064#L2185-1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1795061#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1795059#L2772-1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1795056#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1795053#L2999-3 assume !(1 == ~doorState~0); 1795054#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1836681#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1836680#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1836679#L2673-2 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1836678#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1824155#L2782-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~24#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1824154#L2787-2 timeShift_#t~ret97#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1824153#L2351-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1824152#L1766-7 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1824150#L2355-3 assume !(0 != stopRequestedInDirection_~tmp~20#1); 1824144#L2361-3 assume !(~currentFloorID~0 < 0); 1824142#L2376-3 assume !(~currentFloorID~0 < 0); 1824141#L2389-3 assume ~currentFloorID~0 < 1; 1824140#L2391-3 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1824138#L1188-38 assume !(0 == isFloorCalling_~floorID#1); 1824132#L1192-38 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1824015#L1215-38 stopRequestedInDirection_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 1823978#L2395-3 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1823977#L2673-3 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1823972#L3016-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1789800#L2782-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~24#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1789801#L2787-3 timeShift_#t~ret99#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1789697#L2727-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1789696#L1766-8 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1789695#L2731-12 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1769494#L2737-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1789694#L2743-9 assume { :end_inline_continueInDirection } true; 1789688#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1789686#L2147-1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1789679#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1789680#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1789681#L2156-5 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1789641#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1789633#L1038-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1789613#L3031-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1789611#L707-2 [2021-12-15 17:13:49,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:49,260 INFO L85 PathProgramCache]: Analyzing trace with hash 1656121101, now seen corresponding path program 5 times [2021-12-15 17:13:49,261 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:49,261 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [881742384] [2021-12-15 17:13:49,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:49,261 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:49,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:49,279 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:49,279 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:49,280 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [881742384] [2021-12-15 17:13:49,280 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [881742384] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:49,280 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:49,280 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:49,280 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [445999210] [2021-12-15 17:13:49,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:49,280 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:49,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:49,281 INFO L85 PathProgramCache]: Analyzing trace with hash 1543080751, now seen corresponding path program 1 times [2021-12-15 17:13:49,281 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:49,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1505596481] [2021-12-15 17:13:49,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:49,281 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:49,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:49,317 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:49,318 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:49,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1505596481] [2021-12-15 17:13:49,318 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1505596481] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:49,318 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:49,318 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-15 17:13:49,318 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1056103884] [2021-12-15 17:13:49,318 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:49,319 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:49,319 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:49,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-15 17:13:49,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-15 17:13:49,319 INFO L87 Difference]: Start difference. First operand 73985 states and 132568 transitions. cyclomatic complexity: 58585 Second operand has 8 states, 8 states have (on average 7.5) internal successors, (60), 8 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:51,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:51,500 INFO L93 Difference]: Finished difference Result 157506 states and 281003 transitions. [2021-12-15 17:13:51,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-12-15 17:13:51,501 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 157506 states and 281003 transitions. [2021-12-15 17:13:52,189 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 148838 [2021-12-15 17:13:52,652 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 157506 states to 156322 states and 279717 transitions. [2021-12-15 17:13:52,653 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 156322 [2021-12-15 17:13:52,772 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 156322 [2021-12-15 17:13:52,772 INFO L73 IsDeterministic]: Start isDeterministic. Operand 156322 states and 279717 transitions. [2021-12-15 17:13:52,867 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:13:52,867 INFO L681 BuchiCegarLoop]: Abstraction has 156322 states and 279717 transitions. [2021-12-15 17:13:52,960 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156322 states and 279717 transitions.